A Windows post-exploitation toolkit linked to a ransomware investigation used reverse shells, credential theft utilities, service masquerading and Ethereum-based command-and-control infrastructure to maintain access inside a targeted network. The investigation initially classified two dozen numbered binaries as probable Sliver implants. However, later analysis found that the files were not Sliver payloads. They were plain reverse […]
The post Hackers Abuse Sliver, Mimikatz and Ethereum C2 in Windows Post-Exploitation Attack appeared first on Cyber Security News.