#storm2603 — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #storm2603, aggregated by home.social.
-
🚨 Velociraptor DFIR exploited in LockBit ransomware attacks.
Huntress and Cisco Talos link Storm-2603 to a new campaign abusing outdated Velociraptor builds for privilege escalation, lateral movement, and ransomware deployment.
The crew reportedly used SharePoint exploits (ToolShell) and domain admin creation before dropping LockBit, Warlock, and Babuk payloads.
💬 Are open-source DFIR tools the next frontier for living-off-the-land tactics?
Follow TechNadu for more cutting-edge cyber threat intelligence.
#CyberSecurity #DFIR #Velociraptor #Ransomware #LockBit #Warlock #Babuk #ThreatIntel #Storm2603 #Infosec #IncidentResponse #ThreatHunting #TechNadu #CyberAwareness
-
🚨 Velociraptor DFIR exploited in LockBit ransomware attacks.
Huntress and Cisco Talos link Storm-2603 to a new campaign abusing outdated Velociraptor builds for privilege escalation, lateral movement, and ransomware deployment.
The crew reportedly used SharePoint exploits (ToolShell) and domain admin creation before dropping LockBit, Warlock, and Babuk payloads.
💬 Are open-source DFIR tools the next frontier for living-off-the-land tactics?
Follow @technadu for more cutting-edge cyber threat intelligence.
#CyberSecurity #DFIR #Velociraptor #Ransomware #LockBit #Warlock #Babuk #ThreatIntel #Storm2603 #Infosec #IncidentResponse #ThreatHunting #TechNadu #CyberAwareness
-
🚨 Velociraptor DFIR exploited in LockBit ransomware attacks.
Huntress and Cisco Talos link Storm-2603 to a new campaign abusing outdated Velociraptor builds for privilege escalation, lateral movement, and ransomware deployment.
The crew reportedly used SharePoint exploits (ToolShell) and domain admin creation before dropping LockBit, Warlock, and Babuk payloads.
💬 Are open-source DFIR tools the next frontier for living-off-the-land tactics?
Follow @technadu for more cutting-edge cyber threat intelligence.
#CyberSecurity #DFIR #Velociraptor #Ransomware #LockBit #Warlock #Babuk #ThreatIntel #Storm2603 #Infosec #IncidentResponse #ThreatHunting #TechNadu #CyberAwareness
-
Colt Technology Services was rocked by a cyber attack—Warlock ransomware exploited a zero-day flaw in Microsoft SharePoint, disrupting services across 40 countries. Could your business be next?
#warlockransomware
#cybersecurity
#databreach
#microsoftsharepoint
#storm2603 -
ToolShell under siege: Check Point analyzes Chinese APT Storm-2603 – Source: securityaffairs.com https://ciso2ciso.com/toolshell-under-siege-check-point-analyzes-chinese-apt-storm-2603-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #Intelligence #SecurityNews #Storm2603 #ToolShell #Security #hacking #APT
-
ToolShell under siege: Check Point analyzes Chinese APT Storm-2603 – Source: securityaffairs.com https://ciso2ciso.com/toolshell-under-siege-check-point-analyzes-chinese-apt-storm-2603-source-securityaffairs-com/ #rssfeedpostgeneratorecho #informationsecuritynews #ITInformationSecurity #SecurityAffairscom #CyberSecurityNews #PierluigiPaganini #SecurityAffairs #SecurityAffairs #Intelligence #SecurityNews #Storm2603 #ToolShell #Security #hacking #APT
-
From Check Point Research:
Unmasking the China-nexus #Storm2603 toolset that pre-dated the ToolShell wave.📅
Active since at least Apr 2025.🔑
Multiple ransomware deployed together: #LockBit + #Warlock.💥
Custom backdoors: ak47dns & https://ak47http.
-
Microsoft Reveals Chinese State Hackers Exploiting SharePoint Flaws https://hackread.com/microsoft-chinese-state-hackers-exploit-sharepoint-flaws/ #Cybersecurity #VioletTyphoon #Vulnerability #LinenTyphoon #CyberAttack #SharePoint #Microsoft #Storm2603 #Security #China
-
Microsoft Reveals Chinese State Hackers Exploiting SharePoint Flaws https://hackread.com/microsoft-chinese-state-hackers-exploit-sharepoint-flaws/ #Cybersecurity #VioletTyphoon #Vulnerability #LinenTyphoon #CyberAttack #SharePoint #Microsoft #Storm2603 #Security #China
-
Microsoft Reveals Chinese State Hackers Exploiting SharePoint Flaws – Source:hackread.com https://ciso2ciso.com/microsoft-reveals-chinese-state-hackers-exploiting-sharepoint-flaws-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #VioletTyphoon #Vulnerability #LinenTyphoon #CyberAttack #SharePoint #Microsoft #Storm2603 #Hackread #security #China
-
Microsoft Reveals Chinese State Hackers Exploiting SharePoint Flaws – Source:hackread.com https://ciso2ciso.com/microsoft-reveals-chinese-state-hackers-exploiting-sharepoint-flaws-sourcehackread-com/ #1CyberSecurityNewsPost #CyberSecurityNews #cybersecurity #VioletTyphoon #Vulnerability #LinenTyphoon #CyberAttack #SharePoint #Microsoft #Storm2603 #Hackread #security #China