FamousSparrow: A suspicious hotel guest Yet another APT group that exploited the ProxyLogon vulnerability in March 2021
https://www.welivesecurity.com/2021/09/23/famoussparrow-suspicious-hotel-guest/
https://www.welivesecurity.com/2021/09/23/famoussparrow-suspicious-hotel-guest/
WeLiveSecurity
FamousSparrow: A suspicious hotel guest
ESET researchers uncover a cyberespionage group, FamousSparrow, that has targeted hotels, governments, and private companies worldwide since at least 2019.
Windows API Hooking bypass
https://medium.com/@omribaso/this-is-how-i-bypassed-cortex-xdr-fd96c9c5d957
https://medium.com/@omribaso/this-is-how-i-bypassed-cortex-xdr-fd96c9c5d957