[SecList]The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603

[igor51]

The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603

Kaspersky researchers analyze a complex fileless cyberattack by Storm-2603 involving ToolShell exploitation and subsequent runtime subversion, and discuss how to detect such intrusions.
Source: The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603