Keith

@kwm

How Raspberry Robin fits into ops associated with EvilCorp/DEV-0206/DEV-0243 - A cleaner, albeit less scalable initial access vector

Original research: https://redcanary.com/blog/raspberry-robin

Updates from @MsftSecIntel: https://www.microsoft.com/security/blog/2022/05/09/ransomware-as-a-service-understanding-the-cybercrime-gig-economy-and-how-to-protect-yourself/

Updates from @redcanary: https://www.youtube.com/watch?v=xLteZDHiA1Y

8/3/2022, 12:50:10 PM

Favs: 71

Retweets: 21

Keith

@kwm

@MsftSecIntel @redcanary Here’s a clear depiction of a typical Raspberry Robin infection, which leverages these @MITREattack techniques (credit: @LaurenLeigh522)

T1059.003 https://attack.mitre.org/techniques/T1059/003/

T1218.007 https://attack.mitre.org/techniques/T1218/007/

T1218.008 https://attack.mitre.org/techniques/T1218/008/

T1218.011 https://attack.mitre.org/techniques/T1218/011/

8/3/2022, 2:01:33 PM

Favs: 8

Retweets: 1