I didn't realize Group-IB was trying to one-up Crowdstrike with profile cards on their threat actor profiles. :-/
https://www.group-ib.com/blog/muddywater-infrastructure-malware/
I didn't realize Group-IB was trying to one-up Crowdstrike with profile cards on their threat actor profiles. :-/
https://www.group-ib.com/blog/muddywater-infrastructure-malware/
If you have a fediverse account, you can quote this note from your own instance. Search https://infosec.exchange/users/cR0w/statuses/115219827672513571 on your instance and quote it. (Note that quoting is not supported in Mastodon.)