Method of infection: Water-holing
OSIRIS used a Social Engineering method called “water holing” to attack German IP addresses.
How does water holing attack work?
- The victim enters the infected website.
- The website checks if the target IP is German.
- If it’s a German IP – few evasion techniques are used to bypass EDR
- And then the virus connects to its command server through the Darknet
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
🧠 CISOs: Top 10 Open-Source SIEM Solutions to Try for Free 🧠
Most SIEMs come with a hefty price tag – but did you know some of the most powerful options out there are 100% free and open-source?
If you’re building or optimizing your SOC on a lean budget, these tools can offer serious value without compromising visibility.
Here’s a handpicked list of 10 open-source SIEMs every CISO should consider:
1️⃣ Wazuh – Lightweight, scalable, and packed with threat detection, log analysis, and compliance capabilities.
https://wazuh.com/
2️⃣ TheHive Project – Incident response meets SIEM – great for managing complex investigations.
https://thehive-project.org/
3️⃣ Security Onion – Full Linux distro for threat hunting, IDS, and log analysis.
https://securityonionsolutions.com/
4️⃣ Graylog – Powerful centralized log management with excellent dashboards and alerting.
https://www.graylog.org/
5️⃣ SIEMonster – Built for scalability and based on multiple open-source tools like ELK and Wazuh.
https://siemonster.com/
6️⃣ Elastic SIEM (via ELK Stack) – Combine Elasticsearch, Logstash, and Kibana to visualize threats and trends.
https://www.elastic.co/siem
7️⃣ Apache Metron – Big data SIEM built on Hadoop – ideal for large-scale enterprise analysis.
https://metron.apache.org/
8️⃣ MozDef (Mozilla Defense Platform) – Created by Mozilla to automate incident response.
https://github.com/mozilla/MozDef
9️⃣ AlienVault OSSIM – The classic open-source SIEM with broad community support.
https://cybersecurity.att.com/products/ossim
🔟 Prelude OSS – Modular architecture for detection and correlation, great for custom setups.
https://www.prelude-siem.org/
These solutions offer incredible flexibility and insight when configured right – perfect for proactive teams that want to experiment, test, and deploy fast.
🔐 Want to add human vulnerability detection to your SIEM strategy? AUMINT.io helps CISOs run live social engineering simulations that surface gaps your logs can’t show: Schedule here
🛠️ Save this post and explore the future of SIEM without breaking your budget!
#CISO #SIEM #OpenSourceSecurity #ThreatDetection #SecurityOperations #AUMINT