External/APTs-Adversary-Simulation
1
0
Fork 0
mirror of https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation.git synced 2026-08-04 09:41:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
S3N4T0R
2025-08-07 13:50:14 -04:00
committed by GitHub
parent 0cb9d4a9a8
commit 973efae5b6
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
North Koreans APT/Famous Chollima/README.md
+3
View File
@@ -127,6 +127,8 @@ It's important to ensure that the payload file has the same name as defined insi
![IMG_20250706_113049_180](https://github.com/user-attachments/assets/1f89cf15-055d-4e82-93aa-0e267874ca81)
## The sixth stage (payload connect to TCP-C2 Server with XOR key)
The final result is the successful establishment of a Command and Control channel. This is achieved by delivering a phishing link that mimics Microsoft login pages using BEAR-C2’s phishing module combined with an obfuscated JavaScript payload. Once executed, the payload initiates a reverse TCP connection to the attacker’s server, encrypted with XOR, allowing secure data exfiltration and remote command execution.
https://github.com/user-attachments/assets/29d59e74-cdf5-464a-bd0d-8a151a9d762e
@@ -138,3 +140,4 @@ https://github.com/user-attachments/assets/29d59e74-cdf5-464a-bd0d-8a151a9d762e