Method of infection: Water-holing
OSIRIS used a Social Engineering method called “water holing” to attack German IP addresses.
How does water holing attack work?
- The victim enters the infected website.
- The website checks if the target IP is German.
- If it’s a German IP – few evasion techniques are used to bypass EDR
- And then the virus connects to its command server through the Darknet
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
🛠️ Top Digital Forensics Tools Every Security Team Must Know 🛠️
Digital forensics is the frontline in stopping cyber fraud and social engineering attacks.
⏳ Fast analysis means faster breach detection and response.
Here are essential cheat sheets and references that cut investigation time dramatically:
📄 APFS File System Format Reference Sheet – https://assets.contentstack.io/v3/assets/blt36c2e63521272fdc/blt61c336e02577e733/5eb0940e248a28605479ccf0/FOR518_APFS_CheatSheet_012020.pdf
⚡ EZ Tools Cheat Sheet – https://www.sans.org/posters/eric-zimmerman-tools-cheat-sheet/
🚀 EZ Tools – Results in Seconds at the Command Line – https://www.sans.org/posters/eric-zimmermans-results-in-seconds-at-the-command-line-poster/
🔍 FOR500 Windows Forensic Analysis – https://www.sans.org/posters/windows-forensic-analysis/
🕵️♂️ FOR508 Hunt Evil Windows Host Normal Behavior – https://www.sans.org/posters/hunt-evil/
🧠 FOR526 Memory Forensics Analysis – https://www.sans.org/posters/dfir-memory-forensics/
🌐 FOR572 Network Forensics and Analysis – https://www.sans.org/posters/network-forensics-poster/
📱 FOR585 Smartphone Forensics (Android, iOS, Interactive) – https://digital-forensics.sans.org/media/DFIR_FOR585_Digital_Poster.pdf?_ga=2.220159129.1694995964.1606443208-2142145849.1569879967
🧰 SIFT & REMnux Linux Toolkits – https://www.sans.org/posters/sift-remnux-poster/
Master these references and toolkits to gain the upper hand against attackers.
🔐 At AUMINT.io, we build simulations that leverage forensic intel for real-world attack readiness.
📞 Ready to empower your team with forensic expertise and cut investigation time? Let’s connect!
#DigitalForensics #CyberSecurity #IncidentResponse #ThreatHunting #AUMINTio #CISO #SOC #DFIR #CyberAwareness