Announcement

Collapse
No announcement yet.

GhostEmperor: From ProxyLogon to kernel mode

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • GhostEmperor: From ProxyLogon to kernel mode

    While investigating a recent rise of attacks against Exchange servers, we noticed a recurring cluster of activity that appeared in several distinct compromised networks. With a long-standing operation, high profile victims, advanced toolset and no affinity to a known threat actor, we decided to dub the cluster GhostEmperor.

    More...
Working...
X