๐ฝ๐ด๐๐๐ด๐๐ด๐ฒ @netresec.com ยท Dec 5 #Socks5Systemz backconnect traffic now uses TCP port 2024 (previously 2023) infosec.exchange/@abuse_ch@io...
2 likes 1 replies
?
Replies
Downloaded a fresh pcap from any.โrun to verify that #CapLoader identifies this traffic as โSocks5Systemz backconnect โ app.any.run/tasks/c1b2dc...