Fileless ransomware SOREBRECT uses psexec ; injects ransomware in svchost http://blog.trendmicro.com/trendlabs-security-intelligence/analyzing-fileless-code-injecting-sorebrect-ransomware/ …
-
“don’t shoot the messenger” ;-) … Requires some further investigation but maybe
@bartblaze is more knowledgeable
Just read the article and I agree, it's not fileless - it's just that the payload deletes itself after successful injection. cc @TrendMicro
-
-
@bartblaze tnx for ur input.@cudeso not trying to shoot! sincerely interested if I can learn something new about fileless threats :-)Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.