TASK#STOMP PowerShell backdoor steals documents, Wi-Fi passwords, and clipboard data
Researchers detail the TASK#STOMP PowerShell backdoor that exfiltrates business documents, Wi-Fi credentials, clipboard contents.
c2 infrastructure
2 stories
Transparent Tribe Leverages Private GitHub Repos for Rust Backdoor C2, Challenging the Notion That Platform Abuse Is Inherently Detectable
APT36's Rust-based backdoor RUSTYSHADE uses private GitHub repositories for encrypted C2, raising doubts about the assumed safety of platform-based command.