-

-

[- @PolySwarm_br]

@franklinwaddles Sure thing, shoot me a DM and we can discuss further.

[The DFIR Report @TheDFIRReport]

Sodinokibi (aka REvil) Ransomware

➡️TTR: 4 hours
➡️Initial Access: IcedID
➡️Discovery: nltest, net, wmic, AdFind, BloodHound, etc.
➡️PrivEsc: UAC-TokenMagic & Invoke-SluiBypass
➡️Defense Evasion: Safe Mode & new GPO
➡️Exfil: Rclone
➡️C2: CobaltStrike

https://t.co/Kv5finWrwa

[- @PolySwarm_br]

@Lemon05167084 this you?
https://t.co/V9rGTuS5aO

[Lemon @Lemon05167084]

Don t you dare to look down on citrics

[- @PolySwarm_br]

@vladmoisuc @HeideSean @PolySwarm Hey Vlad, thanks for covering this for me! I'm afraid it was rather late on my side of the world. Thanks for the help!

[- @PolySwarm_br]

@CryptoRedentor @Cointelegraph @PolySwarm Do what exactly?

[- @PolySwarm_br]

@Jefnzt @PolySwarm Very Interesting, thanks for this

[- @PolySwarm_br]

@vladmoisuc @tristandancunha @Tronfoundation @PolySwarm thanks guys!

[- @PolySwarm_br]

@Adeboyejoadeye3 @PolySwarm This is a scam! Polyswarm is not doing an airdrop

[- @PolySwarm_br]

@AzurA_Me This is a scam! Polyswarm is not doing an airdrop

[- @PolySwarm_br]

@valkswagger @PolySwarm This is a scam! Polyswarm is not doing an airdrop

[- @PolySwarm_br]

@RazorcliffH This is a scam! Polyswarm is not doing an airdrop

[- @PolySwarm_br]

@RoastBeeph This is a scam! Polyswarm is not doing an airdrop

[- @PolySwarm_br]

@johndeere19191 This is a scam! Polyswarm is not doing an airdrop

[- @PolySwarm_br]

@RandaBagus01 This is a scam! Polyswarm is not doing an airdrop

[- @PolySwarm_br]

@cecillesantia13 This is a scam! Polyswarm is not doing an airdrop

[- @PolySwarm_br]

@novan_tech @PolySwarm This is a scam! Polyswarm is not doing an airdrop

[- @PolySwarm_br]

@Chandan01998 This is a scam! Polyswarm is not doing an airdrop

[- @PolySwarm_br]

@salyboyt @PolySwarm @hiboat2 @Momohfatai10 @folawale84 @Jamescrysto @jae_hao This is a scam! Polyswarm is not doing an airdrop

[- @PolySwarm_br]

@Princewilly3 @ANIOLAT @Iam_ABOD @iam_timmpsy This is a scam! Polyswarm is not doing an airdrop

[- @PolySwarm_br]

@AbiodunAyopo @PolySwarm This is a scam! Polyswarm is not doing an airdrop