3 ms·
Yesterday I helped in an 'investigation' why a remote WinSvr2012R2 VM with a public IPv4 is no longer allows logging in. To no one's surprise it was hacked, bu
by justsomehnguy 3y ago
Yesterday I helped in an 'investigation' why a remote WinSvr2012R2 VM with a public IPv4 is no longer allows logging in.
To no one's surprise it was hacked, but what was quite amusing is what the hacker wannabe installed... RDPGuard to protect 'his' machine from other hacker wannabees.
Also years ago mIRC was a popular component of the Windows 'rootkits' because it has control and communications built-in.
Yes, Tor is used by malware to securely communicate so it's no wonder it can trigger AV. Refer to [0] for details.
https://news.ycombinator.com/item?id=37740584 https://news.ycombinator.com/item?id=37740584