Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
Excerpt
Adversaries have been VERY busy in the wake of the ScreenConnect vulnerabilities (CVE-2024-1709 & CVE-2024-1708). Here’s all the post-exploitation details, tradecraft, and tactics we’ve observed so far!
Read the original report →Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2024-1708 | High | Score 60/100 | First seen |
| CVE | CVE-2024-1709 | Medium | Score 59/100 | First seen |
IOC Relationship Graph
Building graph…