Mimikatz — Cybersecurity product profile
Mimikatz was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Category: Cyber Products
Cybersecurity products, tools, platforms and software categories.
Akira ransomware — Cybersecurity product profile
Akira ransomware was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Tailscale: VPN Service Used for Persistent Access
Tailscale is a VPN service that creates encrypted mesh networks. The Poisson operator used it to maintain persistent access to a compromised…
OpenSSH Server: Secure Shell Server Installed on Workstation
OpenSSH Server was installed on a Windows workstation by the attacker to enable key-based SSH access and reverse tunnels, providing a backdoor…
DuckDNS: Free Dynamic DNS Service
DuckDNS is a free dynamic DNS service used by the Poisson operator for C2 infrastructure, highlighting its abuse in low-cost cyber attacks.
Backblaze B2: Cloud Storage Service
Backblaze B2 is a cloud storage service used by the attacker for storing tools and data, part of the free-tier kit employed…
IONOS VPS: Cheap Virtual Private Server
IONOS VPS is a low-cost virtual private server hosting service used by the Poisson operator to host his C2 server in Berlin.
Microsoft Malware Protection Engine (mpengine.dll)
Core scanning engine for Microsoft Defender and other antimalware products, affected by the RoguePlanet vulnerability.
Microsoft Teams Data Stored in Azure Cosmos DB Potentially Exposed
Microsoft Teams message data is stored in Azure Cosmos DB, making it potentially accessible through the CosmosEscape vulnerability. Wiz did not report…
DbgView64
DbgView64 is a legitimate Microsoft debugging tool that was used as a process injection target for Backdoor.Turn.