Some TRICKBOT TTPs I've recently gathered. What happens post infection? Hope this post helps provide insight into these activities and to build further detections and preventions!
1️⃣EMPIRE
2️⃣POWERSPLOIT
3️⃣MIMIKATZ
4️⃣COBALT-STRIKE
5️⃣BLOODHOUND
#DFIR
https://t.co/uQhWhrEO3H
Evil Clippy: our new tool for creating malicious MS Office documents. Can hide VBA macros, stomp VBA code (via P-Code) and confuse many macro security analysis tools. Read our blog post for details: https://t.co/fhcyochzBg
When Hillary Clinton stumbled/coughed thru '16 presidential run, rumor spread about her health, until her doctor said a CT scan of her lungs showed she just had pneumonia. But what if hackers had altered those scans to inject fake cancerous nodules onto it?https://t.co/xiPLDrw2aP
Hi @henkvaness , @bellingcat@EliotHiggins - I think I've found it. Amirdasht in Iran. 36.691453, 51.258657
Matching pillars, lamp outside directly above doorway and to the side, shrubbery, plinths outside which can be seen at the end of the video.
⚠️ Important — Update your #Google Chrome immediately to patch a new high-severity 0-day RCE #vulnerability (CVE-2019-5786) that hackers are actively exploiting in the wild
https://t.co/vrorvFYuU8
Patched Chrome version 72.0.3626.121 has been released for Windows, macOS, Linux