Top Attack Vectors: February 2022

This SOC report reviews February 2022 incidents and highlights phishing as the top attack vector (57% of incidents), renewed exploitation of the Log4j vulnerability to deploy cryptominers, and the use of AsyncRAT delivered via ISO/PowerShell/.NET in memory injection chains; it also calls out credential compromise of cloud SSO, removable media threats, and cryptocurrency-themed scams, and provides mitigation and resilience recommendations (phish-resistant MFA, EDR coverage, patching Log4j, and user training).