Top Hacker Tradecraft That Caught Our Eye in 2020

This blog post reviews notable 2020 attacker tradecraft, describing a shift in ransomware activity toward targeted 'big-game hunting' and double-extortion, attackers delaying encryption to exfiltrate data, increased layering of persistence (including UEFI/BIOS via TrickBoot/TrickBot), and continued use and adaptation of defense-evasion techniques such as living-off-the-land and multi-stage obfuscation.