Discover and read the best of Twitter Threads about #BlackBasta
Most recents (1)
1/8 A few months back, we stopped a #ransomware attack by the group #BlackBasta. We spent a lot of time studying their backend servers, malware and more.
If you're interested in #ransomware, then you'll want to read this story...
If you're interested in #ransomware, then you'll want to read this story...
2/8 It ends up that the #BlackBasta gang uses victims networks to log back into their own network! The leads to some interesting monitor opportunities.
This allowed us to monitor _them_.
On the victims servers, we deploy "clip board" monitoring.
This allowed us to monitor _them_.
On the victims servers, we deploy "clip board" monitoring.
3/8 This means we could see everything the attacker "cuts and pastes" within the victims environment. This includes passwords, commands, Russian comments, etc.
We are publishing it all.
We are publishing it all.
