AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
USB Malware - Onc 4191
Onc 4191 was a pretty interesting campaign. Mandiant Managed Defense found this as part of one of their proactive, like threat hunting campaigns. And then what we noticed was there was a bunch of systems that were compromised with what looked like USB malware. When we clustered this as onc 4191, we noticed some really interesting things about it which led us to believing that this was an espionage group most likely with a Chinese nexus.