/home/rqm.:: APT 77 INCIDENT REPORT ::.
This evening around 1772828043 the threat actors known as #APT77 aka #FluffyRodent aka #t34md3gu have breached containment.
While APT77 were engaged in their routine evening check of /var/run which is carried out with escalated privileges and outside of their usual jail environment, due to human error, a critical port was left open for egress and ingress in the production environment. Utilising the breached door(8) Agent R and Agent F both escaped containment.
The discovery was quick and incident response was rapid. Fortunately, after lessons learned from the last incident, the bathroom shower tray fascia has been patched, and upgrades to the general tidiness of the upstairs corridor were actioned. This meant that it was much harder for APT77 to establish persistence, although attempts were made to do so, by hiding under a small console table.
In the immediate aftermath Agent R has taken to run in the wheel in their jail environment, and Agent R, sitting on top of /var/log has been issuing kill -SIGALRM commands repeatedly, but has now settled down after the episode.
APT77 have now resumed their evening check of /var/run, albeit, with continued port scanning activity targeted at the previously discovered security holes.
