All Products: What is SUNSHUTTLE / NOBELIUM persistence?

[#1]

Environment

• Carbon Black Cloud : All supported versions
• EDR Server : All supported versions
• App Control Server: All supported versions

Question

• What is SUNSHUTTLE / NOBELIUM persistence threat?
• List of IOCs to protect against SUNSHUTTLE / NOBELIUM persistence threat

Answer

The following User eXchange article provides information on SUNSHUTTLE / NOBELIUM persistence:
TAU-TIN: SUNSHUTTLE / NOBELIUM persistence

Related Content

https://community.carbonblack.com/t5/Threat-Research/ct-p/threat-research