Discover and read the best of Twitter Threads about #REDSALT
Most recents (1)
What they thought *might* be a boring IR based on initial leads, quickly became interesting when the attacker snapped up the endpoint tooling they just deployed.
Peep that renamed rar.exe snapping up our files for nation state attackers (PLATINUM) to analyze 😅
#FireEyeSummit
Peep that renamed rar.exe snapping up our files for nation state attackers (PLATINUM) to analyze 😅
#FireEyeSummit
It takes hard #DFIR work to get this point but there is nothing quite like uncovering novel/rare persistence and playing around with new attacker tools to understand them. A bit jealous of Adrien and Matias finding Platinum's #REDSALT.
Platinum undetected for 9 years at victim.
These guys found multiple APT groups on network.
The talk then gets into additional advanced backdoors with crazier capabilities that were first.
There's so much here. I'm hearing we *might* upload #FireEyeSummit videos to YouTube 🤞
These guys found multiple APT groups on network.
The talk then gets into additional advanced backdoors with crazier capabilities that were first.
There's so much here. I'm hearing we *might* upload #FireEyeSummit videos to YouTube 🤞
