External/APTs-Adversary-Simulation
1
0
Fork 0
mirror of https://github.com/S3N4T0R-0X0/APTs-Adversary-Simulation.git synced 2026-08-04 09:41:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
S3N4T0R
2026-06-29 09:02:52 -04:00
committed by GitHub
parent e7fd85f527
commit ca2074adab
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
North Koreans APT/Velvet Chollima/README.md
+3
View File
@@ -64,6 +64,9 @@ Establishes a reverse shell connection to IP:PORT.
Allows the attacker to remotely execute commands on the victim’s machine.
Persists by adding itself to the Windows registry (Run Key), ensuring execution every time the system starts.
<img width="1335" height="445" alt="Screenshot From 2026-06-29 09-01-20" src="https://github.com/user-attachments/assets/deabd1f2-03af-4945-acf9-6cdd3829b356" />
## The third stage (Reverse shell by PowerShell)
The final result of this fake CAPTCHA attack is that the attacker gains remote access to the victim's machine through a reverse shell connection. Once the victim unknowingly runs the copied PowerShell command, their system establishes a connection to the attacker's server, allowing remote command execution.