Initial Access
WIZARD SPIDER gains initial access to company network through a phishing email sent to multiple employees.
About Us
QROM’s SecOps service provides your organization 24×7 protection with real-time threat hunting, detection, and responses.
For the sophisticated elite, we offer a bespoke security framework for your digital ecosystem, providing comprehensive protection and peace of mind for every digital asset.
Diligently overseeing your digital footprint while rigorously assessing for robustness and potential vulnerabilities.
We monitor your digital environment for security settings, access controls, and other critical compliance risks – and eliminate error-prone manual compliance checks once and for all – with Anitian’s comprehensive security operations and remediation services.
Timeline
Initial Access
Gaining Access To Four Domain Controllers.
The employee's computer begins to exfiltrate data, including login credentials. Using the stolen credentials, the group then moves laterally across the network, using techniques such as remote desktop protocol (RDP) and the Windows Management Instrumentation Command-line (WMIC) to gain access to four domain controllers.
Native Utilities
With access to the domain controllers, WIZARD SPIDER uses native utilities such as the Microsoft Sysinternals PsExec tool to escalate privileges and compromise two valid user accounts.
Deploys Ransomware On Multiple Servers
The group deploys ransomware on multiple servers, encrypting sensitive data and rendering the servers inaccessible. The ransomware also displays a message demanding payment in exchange for the decryption key.
We attribute our advances in security and compliance to the exceptional people who work here.
Australia’s Growing Threat Ransomware attacks are becoming an increasingly severe issue for Australia’s financial institutions. With a 15% rise in ransomware incidents reported by the Australian Cyber Security Centre (ACSC), the financial sector is…
As a business owner, it’s crucial to have a solid understanding of cyber security and the potential risks it poses to your organisation. However, many of us tend to think of cybersecurity…
A New Era of Digital Trust Cybersecurity is no longer just about building walls to keep the bad guys out. The way we approach digital security has fundamentally shifted. As businesses and…
This website uses cookies to ensure you get the best experience on our website.
