2020-09-23 - SPAMBOT TRAFFIC FROM QAKBOT-INFECTED HOST

ASSOCIATED FILES:

NOTES:

 

IMAGES


Shown above:  Traffic from an infection filtered in Wireshark.

 


Shown above:  Filter to find any unencrypted SMTP messages in the pcap.

 


Shown above:  Extracting emails from unencrypted email traffic in the pcap.

 

Click here to return to the main page.