Feb. 6, 2023, 1:26 a.m. | editor

The DFIR Report thedfirreport.com

In this intrusion from August 2022, we observed a compromise that was initiated with a Word document containing a malicious VBA macro, which established persistence and communication to a command … Read More


The post Collect, Exfiltrate, Sleep, Repeat appeared first on The DFIR Report.

august autohotkey collect command communication compromise dfir document intrusion keylogger macro malicious persistence report sleep the dfir report vba vba macro word word document

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC