Today I want to start a series of posts about attackers, and tracking them afterwards 🎯
It will be done in several parts .
The first part (this one) will be about:
planning an attack by attackers, as well as an introduction (there will be more theory in it) .
The second part will be about: attacks and exploitation of vulnerabilities (with technical examples and an archive of articles about it).
The third part will be about: forensic, the calculation of the attackers in the system (with technical examples and an archive of articles on the subject) + defensive techniques against various attacks.
Let's start part one with a scheme of what cybercriminals do ⚡️And then we will go over each point more specifically!
1)
The first thing the attacker(s) does is to choose a target, the choice of target depends on many factors + orientation of the attacker(s) .🎯
2) After selecting the victim, the attacker(s) will collect information about the target (servers, cms, networks, databases, open ports, etc.) for initial analysis. Various scanners like zoomeye, censys or nmap are in use 🧩
3) If a target seems to be vulnerable then a pen test and vulnerability scanning comes into play. For example, the target is a website. For general tests will use some burpsuite, or different specific tools depending on the analysis above (for example if the site is wordpress they will use some wpscan to scan it, and then (depending on the information from the scan) testing vulnerabilities of plugins, or outdated versions) may use some self signed tools 🔑
4) If the goal (as it usually happens) is too hard or hackers think that searching of vulnerabilities in the system will take too much time, then they use social engineering👥
1) One of the things cybercriminals can do: based on the analysis above they can write malware (or use Cobalt Strike )🦠2)
If they will do this, they will need to spread their virus, for this they will (as an example) analyze the employees of the jeopardized target, and then based on the information received by this they will make phishing attacks
More on this will be in the next part of the attack#network #wifi #attackers #virus #social_engineering #pentest #attacks #scanners