TA577 attacks NTLM

This article is several days old, but I did pause my perusing Mastodon so I can read it.

While I’ve had a few things going on as of late, I finally got a chance to read the article by Proofpoint. TA577’s Unusual Attack Chain Leads to NTLM Data Theft | Proofpoint US is the update on this group.

Its been around for quite awhile now, and instead of delivering malware or ransomware, its doing this.

I’m not versed in this so I’ll let the article speak for itself.