exploit

exploit, lockbit, ransomware

Confluence Exploit Leads to LockBit Ransomware

February 24, 2025

coinminer exploit

coinminer, exploit

SELECT XMRig FROM SQLServer

July 11, 2022

CVE-2021-44077 Exfiltrate Data exploit

CVE-2021-44077, Exfiltrate Data, exploit, Plink

Will the Real Msiexec Please Stand Up? Exploit Leads to Data Exfiltration

June 6, 2022

adfind cobaltstrike conti

adfind, cobaltstrike, conti, exploit, icedid, ransomware

Stolen Images Campaign Ends in Conti Ransomware

April 4, 2022

exploit Fast Reverse Proxy PHOSPHORUS

exploit, Fast Reverse Proxy, PHOSPHORUS, ProxyShell

PHOSPHORUS Automates Initial Access Using ProxyShell

March 21, 2022

exploit Fast Reverse Proxy PHOSPHORUS

exploit, Fast Reverse Proxy, PHOSPHORUS, Plink, ProxyShell, ransomware

Exchange Exploit Leads to Domain Wide Ransomware

November 15, 2021

cobaltstrike exploit hancitor

cobaltstrike, exploit, hancitor

From Zero to Domain Admin

November 1, 2021

cryptominer CVE-2020-14882 exploit

cryptominer, CVE-2020-14882, exploit

Cryptominers Exploiting WebLogic RCE CVE-2020-14882

November 12, 2020

Access DFIR Labs Book a Demo

The DFIR Report provides in-depth, real-world intelligence based on observed intrusions, enabling security analysts and teams  to strengthen defenses, enhance detection,  and accelerate response.