Threat actors are using a layered fake IT-support campaign to obtain remote access, deploy a malicious MSI package and conceal hands-on-keyboard activity behind legitimate signed applications and AWS API Gateway infrastructure. The operation demonstrates how attackers can divide execution, command-and-control and interactive shell functions across multiple processes to frustrate conventional endpoint and network detections. Once […]
The post Hackers Hide Reverse Shell Traffic Behind Signed Apps and AWS API Gateway appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.