sync: auto-sync from GURU-KALI at 2026-05-26 19:41:06

Author: Mike Swanson
Machine: GURU-KALI
Timestamp: 2026-05-26 19:41:06
This commit is contained in:
2026-05-26 19:41:06 -07:00
parent e0dd370934
commit 15de6a7cf2
15 changed files with 64 additions and 39 deletions

View File

@@ -4,6 +4,8 @@ description: DF-JOEL2 compromised via ScreenConnect social engineering. MFA depl
type: project
---
[RESOLVED] CA policies enforced 2026-04-04; incident closed.
## Incident
Joel Lohr's workstation (DF-JOEL2, 192.168.0.143) compromised via phishing email to personal Yahoo account. Attacker "Angel Raya" deployed ScreenConnect C2 backdoors. M365 account also compromised from Turkey/UK/Germany.