@neuralex

👆⚠️
This description is dead on for State Sponsored Malware. #SSM™ 🏆

#GammaGroup's #FinFisher #FinSpy #Finsky does the above. #ForcedMDM via a proxy network (there is a list) & also Fisher Price like #MITM & #WITM #CNE . #infosec

One of the key areas to deteccc this issue is to LOOK AT THE FIREWALL LOG TO SEE WHAT PROXY SERVERS THE CLIENT IS GOING TO that lists the specific proxy servers being used in #SSM™ from #GammaGroup. Find the proxies. Find the list of proxies. Unless you KNOW they are proxies the list will NOT look like proxies. This is the 🗝️🔑🖥️⌨️👂

There _IS_ a pattern and regularity to a client that is infected with #SSM. It is repeatable and stands out once you get familiar with WHERE THE PROXIES ARE.

Thanks for coming to my TedTalk™ on #GammaGroup™ and how to deteccc it by looking at log file. 💯📌👍