FoggyWeb, analysis of a Nobelium backdoor

FoggyWeb is a highly targeted backdoor that is in use by the Nobellium group targeting Active Directory Federation Services servers.

Categories: Trojans

Tags: AD FS DLL search order hijack FoggyWeb IOCs nobelium solarwinds sunburst token-signing certificate version.dll

( Read more… ( https://blog.malwarebytes.com/trojans/2021/09/foggyweb-analysis-of-a-nobelium-backdoor/ ) )

The post FoggyWeb, analysis of a Nobelium backdoor appeared first on Malwarebytes Labs.