redi

redi Configurazione automatica del redirector compatibile con RAT HTTP CobaltStrike Beacon, meterpreter, ecc. e CobaltStrike DNS Beacon. Lo script può configurare un reverse proxy nginx oppure un proxy/forwarder DNS tramite dnsmasq. Se si seleziona HTTPS, configurerà automaticamente letsencrypt...

BeaconEye

BeaconEye Introduzione BeaconEye scansiona i processi in esecuzione per cercare beacon CobaltStrike attivi. Quando vengono trovati processi che eseguono un beacon, BeaconEye monitora ciascun processo per attività C2. Come funziona BeaconEye scansiona i processi live o i file MiniDump per cercare...

New UAC-0056 activity: There’s a Go Elephant in the room

This blog post was authored by Ankur Saini, Roberto Santos and Hossein Jazi. UAC-0056 also known as SaintBear, UNC2589 and TA471 is a cyber espionage actor that has been active since early 2021 and has mainly targeted Ukraine and Georgia. The group is known to have performed a wiper attack in...