#flaxtyphoon — Public Fediverse posts

Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military https://www.securityweek.com/chinese-spies-built-massive-botnet-of-iot-devices-to-target-us-taiwan-military/ #Malware&Threats #BlackLotusLabs #NationState #FlaxTyphoon #RaptorTrain #Nosedive #Sparrow #botnet

Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military https://www.securityweek.com/chinese-spies-built-massive-botnet-of-iot-devices-to-target-us-taiwan-military/ #Malware&Threats #BlackLotusLabs #NationState #FlaxTyphoon #RaptorTrain #Nosedive #Sparrow #botnet

Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military https://www.securityweek.com/chinese-spies-built-massive-botnet-of-iot-devices-to-target-us-taiwan-military/ #Malware&Threats #BlackLotusLabs #NationState #FlaxTyphoon #RaptorTrain #Nosedive #Sparrow #botnet

Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military https://www.securityweek.com/chinese-spies-built-massive-botnet-of-iot-devices-to-target-us-taiwan-military/ #Malware&Threats #BlackLotusLabs #NationState #FlaxTyphoon #RaptorTrain #Nosedive #Sparrow #botnet

Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military https://www.securityweek.com/chinese-spies-built-massive-botnet-of-iot-devices-to-target-us-taiwan-military/ #Malware&Threats #BlackLotusLabs #NationState #FlaxTyphoon #RaptorTrain #Nosedive #Sparrow #botnet

Chinese Spies Built Massive Botnet of IoT Devices to Target US, Taiwan Military https://www.securityweek.com/chinese-spies-built-massive-botnet-of-iot-devices-to-target-us-taiwan-military/ #Malware&Threats #BlackLotusLabs #NationState #FlaxTyphoon #RaptorTrain #Nosedive #Sparrow #botnet

Good day everyone! The Microsoft Threat Intelligence team has discovered activity from a group known as #FlaxTyphoon. They are a nation-state group from China that targeted organizations in Taiwan. While the group leverages tools that are commonly used, like #ChinaChopper, #MetaSploit, and #Mimikatz, they also rely on abusing #LOLBINS, or Living-off-the-land binaries and scripts (tools that exist and come with the native operating system). Some of their TTPs include using registry key modification for persistence, using #powershell, #certutil, or #bitsadmin to download tools, and accessing #LSASS process memory and Security Account Manager registry hive for credential access. This is a great article that not only provides high-level details but it provides a starting point for any organization to start threat hunting by using the technical details provided! Enjoy your weekend and #HappyHunting!

#CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting #ThreatDetection #readoftheday

Good day everyone! The Microsoft Threat Intelligence team has discovered activity from a group known as #FlaxTyphoon. They are a nation-state group from China that targeted organizations in Taiwan. While the group leverages tools that are commonly used, like #ChinaChopper, #MetaSploit, and #Mimikatz, they also rely on abusing #LOLBINS, or Living-off-the-land binaries and scripts (tools that exist and come with the native operating system). Some of their TTPs include using registry key modification for persistence, using #powershell, #certutil, or #bitsadmin to download tools, and accessing #LSASS process memory and Security Account Manager registry hive for credential access. This is a great article that not only provides high-level details but it provides a starting point for any organization to start threat hunting by using the technical details provided! Enjoy your weekend and #HappyHunting!

#CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting #ThreatDetection #readoftheday

SecurityWeek: Chinese-backed APT ‘Flax Typhoon’ Hacks Taiwan with Minimal Malware Footprint https://www.securityweek.com/chinese-backed-apt-flax-typhoon-hacks-taiwan-with-minimal-malware-footprint/ #ThreatIntelligence #Malware&Threats #Nation-State #FlaxTyphoon #LOLbins #China

SecurityWeek: Chinese-backed APT ‘Flax Typhoon’ Hacks Taiwan with Minimal Malware Footprint https://www.securityweek.com/chinese-backed-apt-flax-typhoon-hacks-taiwan-with-minimal-malware-footprint/ #ThreatIntelligence #Malware&Threats #Nation-State #FlaxTyphoon #LOLbins #China