Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
← Back to Report|
Mindmap: Github Yankywilson/jdy Botnet Threat Analysis: Defensive Cti Analysis of the Jdy Reconnaissance Botnet (china Nexus, Volt Typhoon / Kv Lineage, Mitre G1017): Mips64 Implant Reverse Engineering, Infrastructure Enumeration, Tiered Intelligence Reporting, Sigma/yara Detections, and a Tasking Decryptor. Tlp:clear.
18Nodes
17Links
17Iocs
17High conf
0Med conf
93%Avg confidence
16domain
1sha256
Scroll to zoom · Drag to pan · Click node for details