You Got a TOAD: A Novel Technique for Dropping Ransomware

SANS Ransomware Summit 2023

You Got a TOAD: A Novel Technique for Dropping Ransomware
Speaker: Arun Warikoo, Vice President, Cyber Threat Intelligence, BNP Paribas

Telephone-oriented attack delivery (TOAD) also known as callback phishing is a novel distribution method with an end objective to drop ransomware. Conti, the now defunct cybercriminal group, pioneered this technique in 2021 for initial access and drop BazarLoader. This TOAD method of dropping Bazar Loader, referred as BazarCall, was a precursor to infection with Conti ransomware. …

attack callback callback phishing conti cyber cybercriminal cyber threat cyber threat intelligence delivery distribution end intelligence novel phishing president ransomware sans summit telephone threat threat intelligence vice