The DFIR Report on Twitter: "Diavol Ransomware ➡️Initial Access: Zip->ISO loading BazarLoader ➡️Discovery: Net, Ping, AdFind, Advanced IP Scanner, ShareFinder ➡️C2: #CobaltStrike & #BazarLoader ➡️Lateral Movement: RDP, AnyDesk ➡️Exfil: FileZilla, ufile ➡️Impact: Diavol ransomware https://t.co/JWZGF83nqu" / Twitter

https://twitter.com/TheDFIRReport/status/1470373411218239488

---