Remove Protocol Remove SMB Remove VPN
article thumbnail

Cato CTRL Threat Research: Sophisticated Data Exfiltration Tools Used in Double Extortion Ransomware Attacks by Hunters International and Play 

CATO Networks

They typically gain initial access through phishing emails, social engineering, supply chain attacks, and Remote Desktop Protocol (RDP) exploits. One of the key features of RoboCopy is its ability to handle SMB (Server Message Block) traffic. RoboCopy supports various options and switches that enhance its functionality over SMB.

SMB 40
article thumbnail

Cato Research Decrypts the News Behind February Security Events

CATO Networks

Windows SMBv3 Denial of Service Zero-Day One issue that was not covered widely in the news is a zero-day attack discovered in Microsoft Windows SMBv3, the popular enterprise protocol for file and printer sharing. The POC was able to generate the so called Blue Screen of Death on Windows clients that connects into a compromised SMB server.

SMB 52