Secure List: HrServ – Previously Unknown Web Shell Used in APT Attack

https://securelist.com/hrserv-apt-web-shell/111119/

Group-IB: Hunting Rituals #2.2: Threat Hunting for Abuse of Windows Services

https://www.group-ib.com/blog/hunting-rituals-windows-services-part-2/

Red Canary: Threat Hunting for PsExec, Open-Source Clones, and Other Lateral Movement Tools

https://redcanary.com/blog/threat-hunting-psexec-lateral-movement/

Talos: A Deep Dive into Phobos Ransomware, Recently Deployed by 8Base Group

https://blog.talosintelligence.com/deep-dive-into-phobos-ransomware/

Cyware: Lazarus Group Exploit MagicLine2NX Flaw to Launch Supply Chain Attacks

https://cyware.com/news/lazarus-group-exploit-magicline4nx-flaw-to-launch-supply-chain-attacks-11b98153

-----

Twitter: https://twitter.com/CyborgSecInc

LinkedIn: https://www.linkedin.com/company/cyborg-security/

YouTube: https://www.youtube.com/cyborgsecurity

Instagram: https://www.instagram.com/cyborgsecinc/

Facebook: https://www.facebook.com/CyborgSecInc