RAT-a-tat-tat
ID: 26a715f0-5759-55bb-8192-c7967aa43bd7
STIX ID: report--26a715f0-5759-55bb-8192-c7967aa43bd7
Feed Name: SensePost Blog
Release note providing Nmap service probes, a Poison Ivy NSE script, and a DarkComet configuration extractor, with example commands to scan for Poison Ivy, DarkComet, and Xtreme RAT command-and-control infrastructure and to extract the Camellia key from live Poison Ivy C2 servers; contact provided for questions.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.