Tag: Mandiant
Extortion crew UNC6671 leans on personal mobiles in SaaS raids
Google ties a vishing wave against finance and legal firms to UNC6671, which calls staff on personal phones.
Active Exploitation of KnowledgeDeliver LMS Flaw Deploys Memory-Only Web Shell
Mandiant discovered attackers exploiting a shared ASP.NET machine key flaw in KnowledgeDeliver LMS to deploy the BLUEBEAM in-memory web shell.