The traffic containing the clear text password was not scp, it was the reverse shell they sent themselves. Reverse shells are unencrypted on the wire, and when scp prompted for the password, they typed it in over their…
I have an interesting story that I can only recently share due to the statute of limitations passing. I'll stay anonymous for this story. A number of years ago, I worked on a security team "somewhere". When I joined the…
The traffic containing the clear text password was not scp, it was the reverse shell they sent themselves. Reverse shells are unencrypted on the wire, and when scp prompted for the password, they typed it in over their…
I have an interesting story that I can only recently share due to the statute of limitations passing. I'll stay anonymous for this story. A number of years ago, I worked on a security team "somewhere". When I joined the…