Top Tweets for #SiestaGraph
Our Threat Hunter Team has encountered a new variant of #SiestaGraph, malware that interacts with Microsoft’s Graph API for command and control via Outlook and OneDrive. File hash: fe8f99445ad139160a47b109a8f3291eef9c6a23b4869c48d341380d608ed4cb (1/2)
We’re back with another #SIESTAGRAPH update! #ElasticSecurityLabs describes techniques used to maintain persistence in addition to deploying #NAPLISTENER and #SOMNIRECORD: https://t.co/34a4nJslSM
#ElasticSecurityLabs continues to reveal new findings related to #SIESTAGRAPH, like #SOMNIRECORD! This capability masquerades as DNS traffic to evade network-based defenses, check out our analysis and resources here: https://t.co/zlqAC5gX5Z
@elasticseclabs Shout out to @rsprooten for this awesome malware research, we have an entire week of #SIESTAGRAPH related discoveries to share!
#NAPLISTENER is a new #Malware family discovered by #ElasticSecurityLabs, and is part of the #SIESTAGRAPH activity pattern. This capability was designed to defeat network-based visibility and relies on open-source code. Read more here: https://t.co/a9WyeZ1q39
Here's some solid work that @0xBoku put out on using Outlook for C2. Seems that #REF2924 is also a fan and incorporated it into #SIESTAGRAPH. Props. https://t.co/LOXjF917po
It's not common for a device to make so many Microsoft Graph API requests. If there is a C2 framework using the API you may detect it quite easily. Just check how many requests are your endpoints making. I think above 100 could be a good threshold. #ThreatHunting #SIESTAGRAPH
Our team has been observing an intrusion in Southeast Asia over the last few weeks. We have seen bunch of TTP's including:
- Malicious IIS Modules (#DoorMe update)
- Webshell usage
- Exfiltrating mailboxes
- New .NET malware #SiestaGraph
- Dropping vulnerable drivers
#ElasticSecurityLabs is tracking an active intrusion by multiple threat actors into the Foreign Affairs office of an Association of Southeast Asian Nations (ASEAN) member. Find out more in this post: https://t.co/ECojhCThCA
Last Seen Hashtags on Sotwe
Most Popular Users
Elon Musk 
@elonmusk
240.9M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Cristiano Ronaldo
@cristiano
111.6M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
97.9M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.1M followers
KATY PERRY
@katyperry
88.2M followers
Taylor Swift
@taylorswift13
82M followers
Lady Gaga
@ladygaga
73.6M followers
Virat Kohli
@imvkohli
70.7M followers
Kim Kardashian
@kimkardashian
70M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.2M followers
Neymar Jr
@neymarjr
63.6M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.8M followers
Selena Gomez
@selenagomez
61.3M followers
X
@x
60.8M followers