Unwrapping Ursnifs Gifts

In late August 2022, we investigated an incident involving Ursnif malware, which resulted in Cobalt Strike being deployed. This was followed by the threat actors moving laterally throughout the environment … Read More

The post Unwrapping Ursnifs Gifts appeared first on The DFIR Report.

august cobalt cobalt strike cobaltstrike dfir environment exfiltrate data gifts incident malware moving report strike the dfir report threat threat actors ursnif ursnif malware wmiexec