my tweets are severely limited by my lack of understanding of what I am doing.
Petya Emotet
-
Emotet is a RAT being deployed against U.K. and Germany over last few months. It uses HTTP cookie C2 header comms using hacked nginx relays.
Which is how ME Doc updater implant communicated to C2, also using hacked nginx relays. Likely unrelated, but nice setup.
-
-
Nginx proxies on hacked servers are common and not exclusive to Emotet, Dridex does it too.
-
Aye, but HTTP cookie comms? It's a nice one as I don't know anybody who logs HTTP cookie headers at network border.
- Pokaż odpowiedzi
Nowa rozmowa -
Wydaje się, że ładowanie zajmuje dużo czasu.
Twitter jest przeciążony lub wystąpił chwilowy problem. Spróbuj ponownie lub sprawdź status Twittera, aby uzyskać więcej informacji.