APT38 The Sony Hack
Welcome to another TTP Tuesday release! This one is on APT38 The Sony Hack. In this chain, we stage our agent and edit Windows registers for persistence. We then kill some specific processes targeted by Guardians of Peace. Then we use a new way of exfiltrating data in Operator using AWS S3 buckets. Finally, we use the same extortion image used by Guardians of Peace.
Hope you enjoyed this week's chain! If you did, please consider giving us a like and subscribe! If you want to find out more details about his chain, other chains, and keep up to date with Prelude visit our website at feed.prelude.org.
See you next time for another TTP Tuesday release continuing our APT 38 series.