Hackers use Azure Serial Console for stealthy access to VMs - RedPacket Security
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Direct Credentials - T1589.001 Hardware - T1592.001 Multi-Factor Authentication - T1556.006 Phishing - T1660 Phishing - T1566 Powershell - T1059.001 Remote Desktop Protocol - T1021.001 Software - T1592.002 Ssh - T1021.004 Powershell - T1086 Remote Desktop Protocol - T1076
Show in Graph
Common Information
Type Value
UUID b9956769-2c3d-40a0-b04c-0e3a8c048a55
Fingerprint 3c0b8f187c639f41
Analysis status DONE
Considered CTI value 1
Text language
Published May 17, 2023, 5:03 a.m.
Added to db May 17, 2023, 6:18 a.m.
Last updated Nov. 13, 2024, 6:33 a.m.
Headline RedPacket Security
Title Hackers use Azure Serial Console for stealthy access to VMs - RedPacket Security
Detected Hints/Tags/Attributes 46/2/1
Source URLs
Redirection Url
Details Source https://www.redpacketsecurity.com/hackers-use-azure-serial-console-for-stealthy-access-to-vms/
URL Provider
Details Provider Source level domain
Details redpacketsecurity.com www.redpacketsecurity.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 361 ✔ RedPacket Security https://www.redpacketsecurity.com/feed/ 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Mandiant Uncategorized Groups 111 
UNC3944