Fog Ransomware Reveals Active Directory Exploitation Tools and Scripts | #ransomware | #cybercrime - National Cyber Security Consulting

Fog Ransomware Reveals Active Directory Exploitation Tools and Scripts | #ransomware | #cybercrime - National Cyber Security Consulting

Cybersecurity researchers from The DFIR Report’s Threat Intel Group uncovered an open directory hosted at 194.48.154.79:80, believed to be operated by an affiliate of the Fog ransomware group, which emerged in mid-2024. This publicly accessible server revealed a sophisticated arsenal of tools and scripts tailored for reconnaissance, exploitation, credential theft, lateral movement, and persistence. The […] Thank you for subscribing to our RSS fe…