Login
From:
The DFIR Report
(Uncensored)
subscribe
The Curious Case of an Egg-Cellent Resume – The DFIR Report
https://thedfirreport.com/2024/12/02/the-curious-case-of-an-egg-cellent-resume/
links
backlinks
Tagged with:
cobaltstrike
more eggs
Roast topics
Find topics
Find it!
Key Takeaways Initial access was via a resume lure as part of a TA4557/FIN6 campaign. The threat actor abused LOLbins like ie4uinit.exe and msxsl.exe to run the more_eggs malware. Cobalt Strike and…
