ACT III - Word Up
Chapter 1 - The Introduction
Welcome to ACT III,
In this course we're going to follow alongside nation state actors, government hackers, and other cybercriminal organizations to learn how they're compromising businesses and individuals across the globe with malware. You'll see how delivering malicious Word documents to targets for the sole purpose of compromising them with malware is still very relevant today.
Don't miss out on this opportunity! (Update post 2022: You already have!)
Before we get into any of this shit let's learn from others by looking at what other sophisticated hackers are doing shall we?! Pay attention to the tools their using along with their attack methods and notice most, if not all, are using macros within a Microsoft Word or Excel document to gain a foothold into their targets. When you're reading the articles below try your best to not get caught up in the technicalities of the attacks but read through them to get a grasp on the tactics used. Whenever you're reading something that is above your head simply ignore it and don't get overwhelmed. Read through everything that you're able to.
The point of reading these articles is to understand that you can copy these types of attacks and apply the same tactics towards smaller targets of your choice for your own gains.
The main take away point is that I want you to understand the logistics, crafting of the emails, planning, and execution of their methods of madness. Get into DAT mindset you see?
Click to Read - APT32 phishing malware
Click to Read - macOS malware reviews
Click to Read - Sofacy activity
Click to Read - Operation Cobalt Kitty Act II
Read the article below up until "
Discovery and relationships". Feel free to continue reading the whole article if you're so technically inclined past that.
Click to Read - APT Sofacy attacks government entities
Alright, now that you've read those articles you should be somewhat up to speed in what other high level attackers are doing. I hope you can understand the importance of reading those articles and learning from those types of high-level actors. These hackers are launching sophisticated attacks against government institutions so imagine what you could do if you copied their techniques and honed your efforts on your target(s)!
OK so in this course we're going to start to touch on some basics of some tools you should be familiar with. We're going to be using Powershell-Empire for some of the examples here so we'll dabble in that setting everything up.
Let's get into it!
There will be points throughout this course marked in
BLUE. These points are useful to fully grasp the concepts taught and will help with understanding the techniques and explanations on various topics. It's important that when you read them you stop and take the time to do what they say or follow up with them.
All of the code you need to copy and paste into Terminal or the Command Prompt will be
RED. So anytime you see something in
RED you know that it's syntax code and should be entered into Kali, Terminal, Windows Command Prompt, etc.
Click here to continue to Chapter 2