@infosec_jcp ๐๐ done differently#GammaGroup clients use
๐ UDP port 123 ๐
as default #RedTeam data #exfiltration ports
#gammagroup #finfsher #finspy #infosec #memes
#BlueTeam
#statesponsoredmalware โฃ๏ธ๐คณ๐โฃ๏ธ
Update: Add logging before implementing BLOCKING the #exfil shim, obviously. โฃ๏ธ๐คณ๐๐โฃ๏ธ๐๐ง