Not heard anyone mention it yet, so here it is: at least some (not remember all, and the ones remember all had) of the CryptoMix Clop samples won't drop the cleaner bat file if it finds a process w/ one of those names.
Probably not hard to guess what it (should) means...
🤔
PoC: COM Hijacking using runonce.exe registry abuse https://t.co/nWAZOtOaty
&-Runonce.exe transform scriptlet via #RunSetup operations
& I leave you to enjoy it :)
Red Team: Do you know what data your offensive operations are leaking via TLS negotiations? Neither did I until a friend showed me. Blue Team: Good blocking & detection potential. Worth your interest!
Start here: https://t.co/Lnke4Fwd0D
Thanks @haroldogden!
Today I discovered an unfortunate consequence of GDPR: once someone hacks into your account, they can request--and potentially access--all of your data. Whoever hacked into my @spotify account got all of my streaming, song, etc. history simply by requesting it. 😱
If you want to know how I can find passwords/credentials in memory so easily, read Jessica's Thread... you may understand some #mimikatz fields and why I "found" this password despite your efforts 😉 https://t.co/qkzjNOY8sR