June 12, 2023, 1:06 a.m. | editor

The DFIR Report thedfirreport.com

In this intrusion, dated May 2023, we observed Truebot being used to deploy Cobalt Strike and FlawedGrace (aka GraceWire & BARBWIRE) resulting in the exfiltration of data and the deployment … Read More


The post A Truly Graceful Wipe Out appeared first on The DFIR Report.

adfind amp attribution cobalt cobalt strike cobaltstrike data deploy deployment dfir exfiltrate data exfiltration fin11 flawedgrace intrusion lace tempest may may 2023 report strike the dfir report truebot

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Security Compliance Strategist

@ Grab | Petaling Jaya, Malaysia

Cloud Security Architect, Lead

@ Booz Allen Hamilton | USA, VA, McLean (1500 Tysons McLean Dr)