Search posts, tags, users, and pages
Michael Bestman Osemudiamen
My Journey in Cybersecurity Labs: Securing Systems and Writing the Playbook
For weeks, I have had to battle cold and fever. & while the weather had been a spine, I found myself once again staring at my screen, confronting what I think was another challenging phase in my learn
Markdown supported · ⌘↵ to post
Furqan Ashraf
We are small team, who loves to code.
Nice hunt. One step I'd add once you find the C2 IP: check it against a known C2 list. A confirmed match tells you whether it's commodity malware with documented behavior or something targeted, and that changes how deep the remediation needs to go.
Disclosure: I work on WhoisFreaks; our Threat Intelligence Feed includes a daily C2 IP list for exactly that lookup: whoisfreaks.com/products/threat-intelligence-feed
Furqan Ashraf
We are small team, who loves to code.
Nice hunt. One step I'd add once you find the C2 IP: check it against a known C2 list. A confirmed match tells you whether it's commodity malware with documented behavior or something targeted, and that changes how deep the remediation needs to go.
Disclosure: I work on WhoisFreaks; our Threat Intelligence Feed includes a daily C2 IP list for exactly that lookup: whoisfreaks.com/products/threat-intelligence-feed