C2 Archives - Unit 42

Protect Against Russia-Ukraine Cyber Activity

A conceptual image representing malware and its evasions.

1,491

people reacted

Cobalt Strike解析&チュートリアル: Cobalt Strikeによるメタデータの暗号化と復号

By Chris Navarrete, Durgesh Sangvikar, Yu Fu, Yanhui Jia and Siddhart Shibiraj
7月 13, 2022 at 7:40 PM

0

3 min. read

A conceptual image representing malware, such as Popping Eagle.

1,714

people reacted

Popping Eagle: グローバルな統計的分析を高度な脅威アクターの発見に活かす方法

By Yuval Zan and Chen Evgi
6月 6, 2022 at 1:14 AM

0

5 min. read

A conceptual image that represents malware, including the malicious uses of Cobalt Strike and its metadata encoding algorithm covered here.

1,504

people reacted

Cobalt Strike解析&チュートリアル: Cobalt Strikeによるメタデータのエンコードとデコード

By Chris Navarrete, Durgesh Sangvikar, Yu Fu, Yanhui Jia and Siddhart Shibiraj
5月 8, 2022 at 11:18 PM

0

4 min. read

A conceptual image representing malware, such as the SolarMarker campaign discussed here.

1,955

people reacted

SolarMarker (Jupyter)の新たなキャンペーンで示された攻撃パターンの変化

By Shimi Cohen, Inbal Shalev and Irena Damsky
4月 11, 2022 at 1:24 AM

11

3 min. read

2,666

people reacted

Cobalt Strike解析&チュートリアル: Malleable C2プロファイルでCobalt Strike検出が難しくなる理由

By Yanhui Jia, Durgesh Sangvikar, Siddhart Shibiraj, Chris Navarrete, Yu Fu and Andrew Guan
3月 16, 2022 at 3:00 PM

1

4 min. read

We describe a proactive detector for DNS Security that can identify malicious domains based on their registration records and other indicators.

3,589

people reacted

DNSセキュリティで悪意のあるドメインをプロアクティブに検出・防止する

By Zhanhao Chen and Daiping Liu
5月 4, 2021 at 6:00 AM

3

2 min. read

A conceptual image representing the concept of malware, such as that covered in this case study of Emotet Command and Control traffic.

2,702

people reacted

Emotetのコマンド&コントロールのケーススタディ

By Chris Navarrete and Yanhui Jia
4月 13, 2021 at 12:42 AM

1

3 min. read

A conceptual image representing malware, such as Emotet, discussed in this blog.

2,626

people reacted

攻撃チェーンの概要: 2020年12月および2021年1月のEmotet

By Chris Navarrete, Yanhui Jia, Matthew Tennis, Durgesh Sangvikar and Rongbo Shao
3月 14, 2021 at 5:35 PM

1

4 min. read

This conceptual image illustrates the idea of malware, such as the njRAT spreading through active Pastebin command and control tunnel that is discussed in this blog.

2,928

people reacted

稼働中のPastebinによるコマンド&コントロールトンネルを介しnjRATが拡散

By Yanhui Jia, Chris Navarrete and Haozhe Zhang
12月 9, 2020 at 6:00 AM

0

3 min. read

A conceptual image illustrating the concept of espionage, including the type of stealthy activity using backdoors that threat researchers observed the xHunt campaign using.

3,134

people reacted

xHuntキャンペーン: 新たに発見されたバックドアが削除された電子メールドラフトとコマンド&コントロール用のDNSトンネリングを使用

By Robert Falcone
11月 9, 2020 at 12:00 AM

1

3 min. read

プリンスオブペルシャ – ゲームオーバー

By Simon Conant and Lior Efraim
6月 28, 2016 at 3:00 PM

0

4 min. read