Endpoint Hunting for UNC1878/KEGTAP TTPs https://www.lares.com/wp-content/uploads/2020/10/jt-T-_SU1Gzqos-unsplash-scaled-e1603997027363.jpg 1024 683 Anton Ovrutsky https://secure.gravatar.com/avatar/ba20a53800565e497a2e9e70253bfe87?s=96&d=mm&r=g
Intro On October 28th, the FireEye Threat Research team released the following threat report: https://www.fireeye.com/blog/threat-research/2020/10/kegtap-and-singlemalt-with-a-ransomware-chaser.html on the UNC1878 threat actor group and their KEGTAP/BEERBOT, SINGLEMALT/STILLBOT and WINEKEY/CORKBOT campaigns that deploy…
read more