Meterpreter – Computer Security Articles

The Phantom Menace: Brute Ratel remains rare and targeted

May 18, 2023 admin brute ratel, cobalt strike, Featured, havok, Meterpreter, post-exploitation tools, sliver, sophos x-ops, threat research

Credit to Author: gallagherseanm| Date: Thu, 18 May 2023 11:00:58 +0000

The commercial attack tool’s use by bad actors has faded after an initial flurry, while Cobalt Strike remains the go-to post-exploitation tool for many.

MalwareBytes Security

[updated]Unpatched Atlassian Confluence vulnerability is actively exploited

June 3, 2022 admin atlassian, behinder, China Chopper, cobalt strike, confluence, cve-2022-26134, Exploits and vulnerabilities, Meterpreter, Web Shell

Credit to Author: Pieter Arntz| Date: Fri, 03 Jun 2022 14:41:58 +0000

A vulnerability in Atlassian Confluence was found by performing an incident response investigation on a compromised server. The vulnerability is not yet patched.

The post [updated]Unpatched Atlassian Confluence vulnerability is actively exploited appeared first on Malwarebytes Labs.

MalwareBytes Security

Unpatched Atlassian Confluence vulnerability is actively exploited

June 3, 2022 admin atlassian, behinder, China Chopper, cobalt strike, confluence, cve-2022-26134, Exploits and vulnerabilities, Meterpreter, Web Shell

Credit to Author: Pieter Arntz| Date: Fri, 03 Jun 2022 14:41:58 +0000

A vulnerability in Atlassian Confluence was found by performing an incident response investigation on a compromised server. The vulnerability is not yet patched.

The post Unpatched Atlassian Confluence vulnerability is actively exploited appeared first on Malwarebytes Labs.

Microsoft Security

Windows Defender ATP thwarts Operation WilySupply software supply chain cyberattack

May 4, 2017 admin Advanced persistent threats, alert timelines, Altair Technologies EvLog, Antimalware research for IT pros and enthusiasts, Cyberattack, ESTsoft ALZip, Evil Grade, finance, financials, high technology, Kerberoast, MAPP, Meterpreter, Mimikatz, MSRC, Operation WilySupply, pen-testing tools, Powershell, process trees, research, Rivit, SimDisk, software supply chain, ue.exe, update channel, updater, WDATP, Windows Defender Advanced Threat Protection, Windows Defender ATP

Credit to Author: msft-mmpc| Date: Thu, 04 May 2017 16:29:18 +0000

Several weeks ago, the Windows Defender Advanced Threat Protection (Windows Defender ATP) research team noticed security alerts that demonstrated an intriguing attack pattern. These early alerts uncovered a well-planned, finely orchestrated cyberattack that targeted several high-profile technology and financial organizations. An unknown attacker was taking advantage of a silent yet effective attack vector: the compromised…