Emotet Leads To Quantum Ransomware Infection
Threat actors were observed using Emotet to gain access to the victim's network and deploy Quantum ransomware to devices on the domain.
Various tools were used for lateral movement, data exfiltration, and remote access including Cobalt Strike, Rclone, Tactical RMM, and AnyDesk.
Legitimate Windows tools such as systeminfo, ping, net, nltest, and whoami were used for local and remote discovery.
Featured Resources
View More Resources
Demo
From Vulnerability to Validation
See how Cymulate connects vulnerabilities to real attack scenarios to validate what’s actually exploitable.
Demo
Threat Validation Demo
See how Cymulate helps security teams quickly validate protection against new threats and get answers in minutes
Demo
From Control Validation to Exposure Validation
See how security teams move from control validation to true exposure validation using real-world attack scenarios