The cybercrime group Muddled Libra (aka Scattered Spider, UNC3944). The contents of this rogue VM and activity from the attack provide valuable insight into the operational playbook of this threat actor. This single VM acted as the attackers’ beachhead, revealing a detailed, step-by-step view of how the group conducts reconnaissance, steals credentials, and moves laterally […]

The post Rogue VM Linked to Muddled Libra in VMware vSphere Attack, Exposing Critical TTPs appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.