2025-01-27 (Back to Inventory)

Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware

Author(s): MittenSec, MyDFIR, r3nzsec
Organization: The DFIR Report
win.ghostsocks win.lockbit win.systembc

Open article directly   Open article on Archive.org  

Related Articles

2026-06-29 ⋅ The DFIR Report ⋅ Ahmed Farouk, Angelo Violetti, Dino, Jake, Mattison Schuch, Renzon Cruz
From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
Akira AdaptixC2 Akira BumbleBee
2025-09-29 ⋅ The DFIR Report ⋅ The DFIR Report
From a Single Click: How Lunar Spider Enabled a Near Two-Month Intrusion
Brute Ratel C4 Cobalt Strike Latrodectus
2025-08-05 ⋅ The DFIR Report ⋅ The DFIR Report
From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
AdaptixC2 Akira BumbleBee