External/APTs-Adversary-Simulation
1
0
Fork 0
mirror of https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation.git synced 2026-08-04 09:41:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
S3N4T0R
2024-12-29 17:02:13 +02:00
committed by GitHub
parent 1e7bbd1bfd
commit 7217e13dfe
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Chinese APT/Wicked Panda/README.md
+4
View File
@@ -122,3 +122,7 @@ This payload is a malicious program that establishes a reverse shell to an attac
Uses Windows' Winsock API to set up the socket connection to the attacker. Uses Windows' Winsock API to set up the socket connection to the attacker.
## Final result: payload connect to OneDrive C2 server ## Final result: payload connect to OneDrive C2 server
I have previously performed Data Exfiltration during an APT28 attack via OneDrive. You can refer to this link: https://github.com/S3N4T0R-0X0/APT-Attack-Simulation/tree/main/Russian%20APT/APT28-Adversary-Simulation for detailed steps on how this can be accomplished. However, in this particular attack, a more advanced and non-open-source version of BEAR-C2 was utilized for Data Exfiltration.