malware

GigaWiper Infrastructure: From Two IPs to an Iranian APT Attribution Chain

We took two C2 IP addresses from a malware news article and pivoted through Shodan, DNS, reverse MX lookups, certificate transparency, WHOIS, and MITRE ATT&