An incident response reveals itself as GhostShell tool, ShellClient. [Research Saturday]
CyberWire Daily
00:00
Shell Client - The Uniqueness of a Remote Axis Trojan
Shell client is a tool, and specifically discompain this ghost shall campaign. Because there are many remote axitrogans out there, what is called in the black market, that thread actors can use. But this one has a very unique finger printing and is highly customize to fit the goals of this campaign,. So i think the sum of this operation is the uniqueness of all those different factors that eventually led us to the conclusion that we fond a threat actor group that wasn't known previously to death. It could be through one of many a infiltration vectors, to be honestty s point to networks will, in most cases, be one of the following.
Play episode from 05:12
Transcript
