my tweets are severely limited by my lack of understanding of what I am doing.
Unless they log all HTTP headers or network traffic, they don't. I've yet to see a proxy or FW that logs headers by default.https://twitter.com/maliciouslink/status/882721450410508290 …
-
Right - but we don't have any current evidence it was used for purposes other than pushing out notpetya, correct?
Correct! I doubt they did it for fun though, e.g. credential harvesting in Petya was automatic.