Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
Neither Malware nor Harmless: Tracking the NPS Proxy Across the Internet
Malware Families
Excerpt
Executive Summary NPS is an open-source tunneling tool, popular with the Chinese-speaking security community. Deployment of NPS is heavily concentrated within China hosting providers. NPS has been previously observed deployed alongside other remote access tools by multiple actors from the People’s Republic of China. It uses a client-server model enabling users to create reverse network tunnels NPS is a lightweight, open-source proxy and tunneling server written in Go.…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability(2)
Victim
Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| IP | 111.170.148.141 | High | Score 86/100 | First seen |
IOC Relationship Graph
Building graph…