The "pro" hackers at Troop 61786 are back at it under Wang's supervision, but their OPSEC is still a disaster. These operators are still likely playing video games directly from their C2 infrastructure and logging into their official PLA accounts from victim networks. 🎮💻 If you're defending a network, you need to watch for these specific indicators NOW:
Active Targeting: 221.216.117.22 over port 4501.
Infrastructure Lead: Connections to Blue Tech Technologies via 216.180.229.4 (port 999).
New Infrastructure Block (port 5995):
57.128.28.86, 51.15.238.80, 51.159.97.251
51.159.136.27, 57.128.29.136, 94.237.65.52
94.237.75.228, 212.47.234.168
When your adversaries are this loud, use it to your advantage.
No comments:
Post a Comment