2021-02-09 (TUESDAY) - QUICK POST: HANCITOR INFECTION WITH COBALT STRIKE

NOTES:

ASSOCIATED FILES:

 

IMAGES


Shown above:  Screenshot from one of the emails pushing Hancitor.

 


Shown above:  Google Drive page from one of the email links.

 


Shown above:  Word document and redirection to KeyBank page.

 


Shown above:  Screenshot from a KeyBank-themed Word document with macros for Hancitor.

 

Click here to return to the main page.