APT38 CryptoSpy
This week we are looking at APT38’s crypto attacks. You can replicate many things but replicating an entire blockchain seemed a little extreme. This week’s chain concentrates more on the way initial access was gained according to cisa.gov.
Learn more about this chain at https://feed.prelude.org/
TTP Tuesday chains are a part of Prelude's Professional and Enterprise license learn more at https://www.prelude.org/enterprise
Timestamps:
00:00 Prelude Intro
00:07 Chain Introduction
00:35 Targets
00:44 How it works?
01:35 Indicators of Compromise
02:15 Mitigations & Detection
04:30 Chain Demo