A great (albeit technical) read about SMB malware

[Michael B. Smith]

Nothing specifically wrong with SMB in this case, it’s just the malware rides on top of SMB.

 

https://www.activecountermeasures.com/malware-of-the-day-agent-to-agent-communication-via-smb-adaptixc2/

 

[Erik Goldoff]

You've found one of my hideouts, ACM.

Although Chris Brenton and Bill Stearns have both moved on from ACM, still some good content, and many useful free tools and information from their web site.   They also have a lower volume Discord channel (so less scammer/spammer activity), https://discord.gg/u637vyJH , in case you want to take a peek.  I'm ErikG over there.

Erik

On Thu, Oct 2, 2025 at 3:12 PM Michael B. Smith <mic...@smithcons.com> wrote:

Nothing specifically wrong with SMB in this case, it’s just the malware rides on top of SMB.

 

https://www.activecountermeasures.com/malware-of-the-day-agent-to-agent-communication-via-smb-adaptixc2/

 

--
You received this message because you are subscribed to the Google Groups "ntsysadmin" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ntsysadmin+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/c1878db63a154509884c57820e8e617e%40smithcons.com.

[Kurt Buff]

To what foreign realms did they depart?

They do great work....

Kurt

To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/CAGMVfXRGYRXX-Y9FH6NRvz-GVBjqB%2B_1DKV6GoQvmSRSUqG1TA%40mail.gmail.com.

[Erik Goldoff]

No formal announcement has been made yet, but both of them are excellent sources of knowledge with the ability to share.  Much respect for them both, and I hope to hear where they land next.

Erik

To view this discussion visit https://groups.google.com/d/msgid/ntsysadmin/CADy1Ce7WP6Ynx1z-OKC1tHaKAUVys5t2ggPps8bq-FLCTKEKyQ%40mail.gmail.com.