#IOCs

FoggyWeb, analysis of a Nobelium backdoor

FoggyWeb is a highly targeted backdoor that is in use by the Nobellium group targeting Active Directory Federation Services servers. Categories: Trojans Tags: AD FS DLL search order hijack FoggyWeb IOCs nobelium solarwinds sunburst token-signing certificate version.dll *( Read more... ( https://blog.malwarebytes.com/trojans/2021/09/foggyweb-analysis-of-a-nobelium-backdoor/ ) )* The post FoggyWeb, analysis of a Nobelium backdoor appeared first on Malwarebytes Labs.

3 years ago

Malwarebytes

Open in Source

#Trojans #AD FS #DLL search order hijack #FoggyWeb #IOCs #nobelium #solarwinds #sunburst #token-signing certificate #version.dll