Keyhole

Latrodectus BackConnect spider

Latrodectus BackConnect

| | BackConnect, Cyrillic, IcedID, Keyhole, Latrodectus, NetworkMiner, reverse shell, The DFIR Report, VNC
I recently learned that the great folks from The DFIR Report have done a writeup covering the Latrodectus backdoor. Their report is titled From a Single Click: How Lunar Spider Enabled a ...
NETRESEC Network Security Blog
Cookie parameters from GzipLoader request in NetworkMiner 2.8.1

Forensic Timeline of an IcedID Infection

| | BackConnect, Cobalt Strike, CobaltStrike, ec74a5c51106f0419184d0dd08fb05bc, GzipLoader, IcedID, JA3S, Keyhole, Keylog, NetworkMiner, VNC, Windows Sandbox
The BackConnect and VNC parsers that were added to NetworkMiner 2.8.1 provide a unique possibility to trace the steps of an attacker with help of captured network traffic from a hacked computer ...
NETRESEC Network Security Blog