CrowdStrike / detection-container

https://quay.io/repository/crowdstrike/detection-container
The Unlicense
38 stars 20 forks source link

Add new Trojan #20

Closed shawndwells closed 2 years ago

shawndwells commented 2 years ago

Re-introduces an inert Trojan, developed by CrowdStrike, that will attempt to connect to 192.168.0.1 over TCP port 4444.

This is a bit better than having live malware, that -actually- beaconed back to the creators when CrowdStrike policy enforcement was disabled ;)