The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603

Kaspersky researchers analyze a complex fileless cyberattack by Storm-2603 involving ToolShell exploitation and subsequent runtime subversion, and discuss how to detect such intrusions.
This article has been indexed from Securelist

Read the original article:

The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603