//
sign in
Profile
by @danabra.mov
Profile
by @dansshadow.bsky.social
Profile
by @jimpick.com
AviHandle
by @danabra.mov
AviHandle
by @dansshadow.bsky.social
AviHandle
by @katherine.computer
EventsList
by @katherine.computer
ProfileHeader
by @dansshadow.bsky.social
ProfileHeader
by @danabra.mov
ProfileMedia
by @danabra.mov
ProfilePlays
by @danabra.mov
ProfilePosts
by @danabra.mov
ProfilePosts
by @dansshadow.bsky.social
ProfileReplies
by @danabra.mov
Record
by @atsui.org
Skircle
by @danabra.mov
StreamPlacePlaylist
by @katherine.computer
+ new component
ProfilePosts
Excited to dive into the latest @thedfirreport.bsky.social! 🎉 'The Curious Case of an Egg-cellent Resume' is packed with detailed insights and a goldmine for #ThreatHunting. 🕵️‍♂️ Perfect way to start the week! 🚀 Check it out: thedfirreport.com/2024/12/02/t... #infosec
Dec 4, 2024
Key Takeaways Initial access was via a resume lure as part of a TA4557/FIN6 campaign. The threat actor abused LOLbins like ie4uinit.exe and msxsl.exe to run the more_eggs malware. Cobalt Strike and…
thedfirreport.com
The Curious Case of an Egg-Cellent Resume
Hans-Petter Fjeld