Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments

T1Covered by 1 source · first reported by Microsoft Security Blog at 24 Sept, 16:00 UTC

Storm-2570 is a ransomware affiliate that uses consistent post-compromise tools and techniques across deployments involving Qilin, DragonForce, Anubis, and BERT ransomware, and provides guidance to help defenders detect and disrupt this activity before ransomware deployment. The post Beyond the…

security

Sources

• T1Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deploymentsMicrosoft Security Blog24 Sept, 16:00