Octopus

什么是 Octopus？ Octopus 是一个基于 Python 的开源预操作 C2 服务器，可以通过 HTTP/S 控制 Octopus PowerShell agent。 创建 Octopus 的主要目的是用于任何红队操作之前，你可以先使用 Octopus 攻击目标并收集信息，而不是一开始就投入完整的作战武器库和基础设施，然后再开始实际的红队操作。 Octopus 以一种非常简单的方式工作：通过良好加密的通道与 C2 执行命令并交换信息，这使得它对几乎所有防病毒软件、端点防护和网络监控解决方案都难以察觉且不被检测到。 Octopus 的一个很酷的功能叫做 ESA（Endpoint...

GOFFEE continues to attack organizations in Russia

GOFFEE is a threat actor that first came to our attention in early 2022. Since then, we have observed malicious activities targeting exclusively entities located in the Russian Federation, leveraging spear phishing emails with a malicious attachment. Starting in May 2022 and up until summer of...

Russian Hacking Group Targeting Banks Worldwide With Evolving Tactics

Silence APT , a Russian-speaking cybercriminal group, known for targeting financial organizations primarily in former Soviet states and neighboring countries is now aggressively targeting banks in more than 30 countries across America, Europe, Africa, and Asia. Active since at least September 201...