From f60c0dce2246cb8121509b442ad9bd430dfdd539 Mon Sep 17 00:00:00 2001 From: "Johnny B. Goode (not my real name)" <102751043+blueteamer@users.noreply.github.com> Date: Thu, 14 Mar 2024 13:16:58 +0100 Subject: [PATCH] Fixed article --- .../2024-03-know-your-enemy-midnight-blizzard/index.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/content/articles/2024-03-know-your-enemy-midnight-blizzard/index.md b/content/articles/2024-03-know-your-enemy-midnight-blizzard/index.md index a3f9691..c551e5e 100644 --- a/content/articles/2024-03-know-your-enemy-midnight-blizzard/index.md +++ b/content/articles/2024-03-know-your-enemy-midnight-blizzard/index.md @@ -41,6 +41,8 @@ Midnight Blizzard's TTPs encompass a wide array of methods aimed at infiltrating ## Known malware and vulnerabilities +Midnight Blizzard is known for using the following malware, tools and vulnerabilities to gain access to the victim's environment. + ### Malware - BoomBox - A malicious downloader - EnvyScout - A Stage 1 malicious payload @@ -50,7 +52,7 @@ Midnight Blizzard's TTPs encompass a wide array of methods aimed at infiltrating - Sibot - Malware used for persisting on a targeted system - NativeZone - A malicious loader used to load malicious content - VaporRage - Malicious downloaders dropped during initial access -- CCleaner - +- CCleaner - Malicious payload disguised as 'legit' software ### Vulnerabilities