Threat report

thedfirreport.com/2024/09/30/nitrogen-campaign-drops-sliver-and-ends-with-blackcat-ransomware

https://thedfirreport.com/2024/09/30/nitrogen-campaign-drops-sliver-and-ends-with-blackcat-ransomware/
Published on
thedfirreport.com

ATT&CK techniques those detections carry

  • T1048Exfiltration Over Alternative Protocol
  • T1567.002Exfiltration to Cloud Storage
  • T1574.001DLL
Open the original

2 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
PUA - Restic Backup Tool ExecutionHigh
Potential Python DLL SideLoadingMedium

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice