
An incident response reveals itself as GhostShell tool, ShellClient. [Research Saturday]
CyberWire Daily
00:00
Ghost Shell - A Tool That We've Never Seen Before
The tool itself is called shell clay. This is a thread actor that we've revealed and exposed to the world that is called malcama. One of the significant techniques that are leveraged by this is that the command and control operation is leveraged through drop box. Let vorizon help you optimize your defenses and achieve the maximum return on your security investments. Learn more at vorizon enterprise slash products slash security.
Play episode from 02:15
Transcript


