#living-off-the-land — Public Fediverse posts

Detection fidelity in the age of AI agents living off the land: https://jvehent.org/2026/09/22/detection-fidelity-ai-agents.html

#threatdetection #detectionfidelity #ai #agentic #livingofftheland

AI-Powered Attacks Target Latin America With Advanced Proxy Networks

Latin America's transportation, government, and water utility sectors are under siege by sophisticated AI-powered attacks that leverage advanced proxy networks and living-off-the-land techniques to infiltrate and exfiltrate sensitive data. These multi-stage intrusions have already compromised key organizations in…

https://osintsights.com/ai-powered-attacks-target-latin-america-with-advanced-proxy-networks?utm_source=mastodon&utm_medium=social

#AipoweredAttacks #LatinAmerica #EmergingThreats #LivingOffTheLand #ProxyNetworks

XWorm 7.1 und Remcos RAT: Angreifer setzen auf dateilose Techniken und Windows-Bordmittel

Beide Schadprogramme nutzen vertrauenswürdige Windows-Systemwerkzeuge, um gängigen Sicherheitslösungen zu entgehen – ein Ansatz, der unter dem Begriff „Living off the Land“ bekannt ist und zunehmend auch bei kommerziell vertriebener Malware zum Einsatz kommt.

https://www.all-about-security.de/xworm-7-1-und-remcos-rat-angreifer-setzen-auf-dateilose-techniken-und-windows-bordmittel/

#winrar #Livingofftheland #malware #cybersecurity #maas

Active phishing campaigns monitored by Netskope Threat Labs are leveraging high-frequency video conferencing workflows as an infection vector.

Attack chain:
- Pixel-perfect spoofed Zoom / Teams / Meet page
- “Mandatory update” prompt
- Deployment of signed RMM agent (Datto, LogMeIn, ScreenConnect)
- Administrative persistence & lateral movement

Key concern: Abuse of legitimate, digitally signed RMM binaries to evade signature-based controls and blend into sanctioned enterprise traffic.
Detection challenge:
Distinguishing authorized RMM activity from malicious post-exploitation.

Source: https://www.netskope.com/blog/attackers-weaponize-signed-rmm-tools-via-zoom-meet-teams-lures

Are you enforcing strict RMM allowlists and monitoring outbound C2-like behavior within approved tools?
Engage below.

Follow @technadu for threat intelligence coverage.

#ThreatIntel #RMMAbuse #LivingOffTheLand #EDR #SOC #BlueTeam #Phishing #EnterpriseSecurity #ZeroTrust #IncidentResponse #CyberDefense #SecurityResearch

Exciting community event TODAY 🥳

Why we can’t go back to “living off the land”

What's your opinion? 🤓

Time: 16:00 UTC (https://dateful.com/time-zone-converter)

Link to events page:
https://ubi4me.org/2025/11/4th-november-event-why-we-cant-go-back-to-living-off-the-land/

Link for the event:
https://meet.jit.si/UBI4ME_Community_Event_November_2025

#UBI4ME #UBI #LivingOffTheLand #PostWork #Automation #Unemployment #CostOfLiving

Is Your Workplace Software a Spy Tool? Ransomware Gangs Say Yes

#Cybersecurity #Ransomware #Cybercrime #Infosec #ThreatIntel #DataPrivacy #Espionage #FogRansomware #LivingOffTheLand #Malware #CorporateSecurity #Hacking

https://winbuzzer.com/2025/06/13/is-your-workplace-software-a-spy-tool-ransomware-gangs-say-yes-xcxwbn/

Darktrace: 96% of Phishing Attacks in 2024 Exploited Trusted Domains Including SharePoint & Zoom Docs – Source: www.techrepublic.com https://ciso2ciso.com/darktrace-96-of-phishing-attacks-in-2024-exploited-trusted-domains-including-sharepoint-zoom-docs-source-www-techrepublic-com/ #rssfeedpostgeneratorecho #ArtificialIntelligence #SecurityonTechRepublic #SecurityTechRepublic #EnterpriseSoftware #CyberSecurityNews #LivingOffTheLand #cybersecurity #Cybersecurity #ransomware #SharePoint #Darktrace

#100DaysOfRedTeam
#Day5 -Learn what are living off the land techniques and why they are important during a red team engagement.

https://www.100daysofredteam.com/p/can-your-red-team-live-off-the-land
#redteam #cybersecurity #livingofftheland

💙💙BlueTeam today (#awkward)💙💙 Auto-exfil of system essentials via ssh. 👉Any guess👈 Ebury? Mining-kiddos? Here at THC we appreciate compact shell-based exfil-tools : #livingofftheland
(Source here: https://cryptpad.disroot.org/code/#/2/code/view/WTjS+8u6DUEipuuiDlIPZPHULGDVDnz7o-p3P5G40LM/)

https://www.infosecworrier.dk/stuff/redteam/#living-off-the-land-lol #LoL #LivingOffTheLand #living_off_the_land #hacklu2024 @hack_lu

https://github.com/magicsword-io/LOLRMM

#LivingOffTheLand #RemoteManagement #LOLRMM

"Living off the Land" (LotL) in cybersecurity refers to threat actors using existing tools and features within a target system or network to conduct their operations, rather than deploying external or specialized malware. This approach can help threats avoid detection by blending in with legitimate activities and leveraging tools like system scripts, administrative tools, or built-in utilities to achieve their objectives.

Over the following series of posts, I'll describe techniques for identifying threat actors engaged in Living off the Land (LotL). The posts will be broken into sections, such as, techniques for identifying threats in a Microsoft Windows environment, techniques for a Linux environment, network threats, lateral movement, and threat intelligence, among others.

I hope you find this topic beneficial.

I'll be providing a talk about this subject at the upcoming @GrrCON conference in Grand Rapids, MI, September 26-27, 2024, https://www.grrcon.com

#GrrCON #LOTLattack #LivingofftheLand

#China's #VoltTyphoon also tracked as #BronzeSilhouette, cyber-espionage group are known for extensively using #LivingOffTheland (#LOTL) techniques as part of their attacks on critical infrastructure organizations. They infiltrated a #criticalinfrastructure network in the #UnitedStates and remained undetected for at least five years before being discovered, according to a joint advisory from CISA, the NSA, the FBI, and partner Five Eyes agencies. https://www.bleepingcomputer.com/news/security/chinese-hackers-hid-in-us-infrastructure-network-for-5-years/

Alpha Ransomware Uses Living-Off-The-Land Tools To Attack Windows Computers https://gbhackers.com/alpha-ransomware-living-off-the-land/ #CyberSecurityNews #Livingofftheland #cybersecurity #CyberAttack #Ransomware #ransomware

📬 LOTS: GitHub und seine zunehmende Rolle in der Cyberkriminalität
#ITSicherheit #DeadDropResolver #github #GitHubRepository #livingofftheland #LivingoffTrustedSites #LotL #LOTS #Payloads #RecordedFuture https://sc.tarnkappe.info/6b482f

A morning of woodcutting this morning. A beautiful warm day and i was surprised to see that the sap is already rising so strongly that it is dripping from newly cut branches. Spring is on the way, but surely this is too early?!
#woodcutting #selfsufficiency #livingofftheland #spring #umbria #italy
#climatechange #today

The Permaculture Student (1 + 2)
Author: Matt Powers

Get a thorough & professional introduction to Permaculture Design with a reviewed and endorsed 'PDC on Paper' + a FREE Video Series.

Via:
https://www.thepermaculturestudent.com/get-the-permaculture-student-1-free

More: https://cutt.ly/pc-db
[Download via Dropbox]

#Permaculture #ecology #gardening #livingofftheland #ebook

@jondrowe Have you ever tasted the difference in honey made from different flowers? Some flowers have a stronger taste than others that comes through the honey. Dandelion Jelly strikes me as like a honey with a subtly different flavour. It is very light & delicate in its difference. For instance, Bugloss flowers make a strong dark honey. (see pic for Bugloss, thistle-like flower) #trade #homemade #jellies #dandelion #writers #homestead #livingofftheland

Repost from @bilbrey_farms
"Food is a weapon. It’s more important than ever to start gaining skills in homesteading and gardening. Food security, knowing how/where your food is raised, and knowing the quality of that food is becoming ever more important in today’s world.

#foodrevolution #livingofftheland #garden #gardening #gardener #gardenersofinstagram #gardenlove

https://www.instagram.com/reel/ClMMfwMJTEn/?igshid=MDJmNzVkMjY=