Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
3 IOCs
New Abyssos RAT Hijacks Browser Sessions, Steals Credentials and Gives Attackers Remote VNC Access
Excerpt
Abyssos operates as a post-exploitation framework. Once attackers gain access to a device, they can use the RAT to explore files , collect credentials, monitor activity, execute commands, download additional payloads, and remotely interact with the victim system. One of Abyssos’ most concerning features is hidden virtual network computing, or HVNC . This capability allows attackers to open and control applications in an invisible desktop session that is separate from the…
Read the original report →Diamond Model
Adversary
Infrastructure(1)
Capability
Victim
Indicators of Compromise
Open the mindmap →3 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| SHA256 | 52b400c5be1557a8df146f62fde76d906e7e0a92ed76788717ef61c758f315aa | Medium | Score 53/100 | First seen |
| IP | 213.145.86.42 | High | Score 58/100 | First seen |
| SHA256 | ca94d95413210a2a325155740eb8a5c58627ad5c4e704478621e7fc8165fe173 | Medium | Score 53/100 | First seen |
IOC Relationship Graph
Building graph…