#CLOUDBURST

Malware/Tool

2023-03-09 • Stealing the LIGHTSHOW (Part One) — North Korea's UNC2970

CLOUDBURST is a C downloader distributed through Microsoft Intune that surveys hosts, communicates over HTTP, and downloads and executes shellcode from its command-and-control server.

Tagged Reports

« Back