#c2: activities

[paperglader]

it hit me again yesterday- literally as i was about to fall asleep- how stupidly cute it is that marisha as beau randomly burst out "i could be her beacon [that guides her home]" all awkward and earnest about jester, for then one campaign later, finally, laura as imogen come back to her with "you're my tether, laudna. sometimes i feel like i’m about to float away, but as long as you’re there" and i just think that's beautiful and another reminder of how in so many ways CR continues to be endless love letters from the cast to each other.

[leclercskiesahead]

Carlos: have you seen that tiktok?

*later*

Carlos: I’m not into tiktok recently

Charles: what a liar

[exandrianpunk]

i have rewatched campaign 2... many times now. the mighty nein are everything to me. it's my comfort show. it's usually not a great sign for my emotional state when i catch myself thinking "hmm is it time for another c2 rewatch?"

i started this run about a month ago. i've been doing... poorly. in all aspects of my being. and i have reached ep 26 again.

every. single. time. that i have rewatched this campaign. this episode comes around as i am at the lowest point of my current character arc.

it's my favorite episode. i hate it with every fiber of my soul. every single second is heartbreaking and gut-wrenching and. i love it so much.

of course it logically makes sense. i start watching the campaign when i start feeling bad and things continue to be bad and a month goes by and wow it's time for episode 26 what a surprise that everything is bad and i need to cry. it's not really that impressive.

it's the emotional catharsis that i so desperately need. every. single. time. and this time is no different.

it still somehow feels meaningful each time. this story is so important to me. and it hurts to watch the build-up and know what's coming. and to catch new little things each time (this time it's how tal talked about the tea that Jumnda offered the group).

but it still brings such relief to see it play out. for the cast to make it through. to know there is another episode that comes after and another after that and so many more stories for the nein and the rest of exandria to tell.

these nerdy-ass voice actors have helped me get through a lot. and i'll keep clawing at the hope that i can keep going through this too.

[essektheylyss]

"How much for this book on hoe techniques?" Why do you ask, Caleb? Out of practice? Been a while?

[tragedykery]

love preparing for my cambridge english exams. I can literally just Lie

[khaenriahkhaenriah]

Posted this when the banner was announced.

In over 250 pulls using freemogems and birthday money I got:

a) yoimiya (the one I actually wanted)

b) aquila favonia (yay for kaeya)

c) tighnari c1 (love him)

d) raiden c1 (first five star she deserves it)

e) two kiraras (somehow)

f) mika (phys kaeya being realised)

g) countless bennetts and saras

Wanna know who I didn't get?

FUCKING CHEVREUSE

[pocketgalaxies]

i thought i was free from persona 5.....free to return to my other interests....but then...persona 5 strikers was on sale..................

[bonnieisaway]

help.

[hertwood]

i was tagged by @lewisainz 😘💕

rule: post the current first sentence of your wip(s). (i'm doing two sentences bc i have short first sentences lol)

I am tagging treasured mutuals @hollywoodsargeant @albertparks @oversteerey if yall would like 💖 i'm putting 5 bc thats All i Have but do however many ur heart desires ~

Lewis doesn't find himself in malls often. It's a long story—his flight was perpetually delayed, and then his personal assistant convinced him a road trip was the best option.

The thing is, Max was, and is, perfectly content with commercial gigs. It was easy, straightforward: show up, put on clothes, pose for pictures, go home and cash the check.

Max first meets Lando by accident. He's coming home from work, grumpy and exhausted, and there's a complete stranger on his couch when he opens the door.

Max immediately knows he's seen something that he shouldn't. His phone is ringing before he’s even out of the building.

Lando doesn’t even need to ask anymore. The expectation is unspoken now, when he flies back to the UK after races, invites himself into Max’s apartment.

[pink-vulpix]

fellow genshin players, i need advice

[4giorno]

if i dont finally get my c5 bennett while wishing for cyno im gonna snap 💀

[marcillepanels]

[leclercskiesahead]

“We have our inside jokes” “it’s beautiful like this” um okay

[hydrachea]

2-5, 7, 13, 14, 30, 31 and 34!

(Genshin Impact ask game)

2. Who is your favorite character?

Tartaglia. It's Tartaglia, to nobody's surprise. I don't know either, I didn't think much of him before I started playing and then he stole my heart and now he means the world to me. I got him to friendship level 6 today and spent half an hour writing the poorest excuse for an essay ever in an attempt to piece his character together from canon info only. I love him so goddamn much and he's disgustingly spoiled.

3. Your favorite party?

This is my current main team (I have a secondary team with Geo Aether, Jean and Ningguang for "utility" like puzzles and mining). Double pyro for the damage, Taru as the main DPS with Yanfei as backup when he's on cooldown or enemies are immune to hydro, Thoma for the shields, and Shinobu for healing and a bit of damage now that she's C4 and has a 4-piece Ocean-Hued Clam set (both of them for elemental reactions as well). Shinobu and Yanfei are a very good Overloaded duo, and Tartaglia can pretty much murder anything on his own but a bit of Vaporize or Electro-Charged is always welcome.

4. Which characters do you have (count all of them)?

That's all of them! So 22 total, but only about 14 that actually come from the gacha since you get a lot as quest rewards. Though interestingly enough, my Dori isn't an event reward since I'm not in Sumeru yet - I just rolled her.

Just... Don't look at their levels. It's a work in progress.

5. The character you don’t have but you want soso bad?

Zhongli, oh my god I want Zhongli so badly. He's my second favorite (I expected him to be the first but we all know what happened here) and I need his shield. For my sanity.

7. Who is your least favorite character?

For playables, I'm not huge on Mona though it's more her design - she's my "least favorite" in the sense that I like everyone else more, not that I dislike her. For NPCs I still hold the grudge of a lifetime against Keijirou for how tedious his stealth mission was.

13. Favorite enemy?

Ruin guards! I used to hate fighting them but loved their design (Castle in the Sky looking guys, how could I not?) but now that I have a built DPS I hunt them for sport and I have a blast every time. Fatui Pyro Agents are a very close second, they also have great designs and fighting styles.

14. Least favorite enemy?

So far it's still Geovishaps. My shielder isn't optimal for them, and they're just very annoying to fight - a close second is any kind of Lawachurl.

30. Something you like in general.

The music. Genshin has an incredible soundtrack, and I think for me it's part of why I enjoy the game so much. Good music really adds to a gaming experience.

31. Something you dislike in general.

The controls. They aren't bad, but there's no optimal setup - I play with a controller, which is nicer to sit back and relax while I play and also gives me better camera control, but it's not great for the instruments and most importantly it makes aiming with a bow incredibly hard. A bit of a problem when your main uses a bow... But I'm not willing to switch to keyboard for that reason alone, because for almost everything else I prefer using my controller.

34. What do you think of Paimon?

I genuinely, unironically adore Paimon. I still think it's due in part to how much nicer on the ears her voice is in the CN dub, but I also grew really fond of her. She's a dear friend to my Traveler, she cares about him so damn much and he cares about her too, and she's so endearing. If something happens to her I'll burn Teyvat to the ground.

[jcmarchi]

Akira ransomware prevention and defense 2024

New Post has been published on https://thedigitalinsider.com/akira-ransomware-prevention-and-defense-2024/

Akira ransomware prevention and defense 2024

EXECUTIVE SUMMARY:

In March of 2023, the first Akira ransomware strain was observed in the wild. Since then, the group has compromised over 100 different organizations, targeting those in the financial, manufacturing, real-estate, healthcare and medical sectors.

Akira operates on a Ransomware-as-a-Service (RaaS) model and typically deploys a double-extortion scheme. This involves exfiltrating sensitive data prior to device encryption and insisting on a ransom in exchange for withholding the data from the group’s TOR leak site.  

Most recently, Akira interrupted a U.S. emergency dispatch system, causing a nine-day operational outage. During the outage, dispatchers relied on backup systems. As of the present writing, full system restoration is still a work-in-progress.

About Akira

The group is believed to have taken its name from the 1988 cult anime film of the same name, which depicts biker gangs in a dystopian Tokyo. The Akira ransomware gang is known for use of a retro aesthetic on victims’ sites, reminiscent of the 1980’s green screen consoles.

Cyber security researchers have uncovered evidence linking the Akira group to the notorious Conti ransomware operation. In at least three separate cryptocurrency transactions, Akira criminals appear to have sent the full amount of the ransom payment to Conti-affiliated addresses.

The overlap of cryptocurrency wallets indicates that the individual controlling the address or wallet has either splintered off from the original group, or is working with two different groups simultaneously.

How Akira operates

Akira commonly breaches systems by obtaining unauthorized access to the target organization’s VPNs, as through a compromised username/password combination.

After sneaking in through an endpoint, Akira typically uses any of several methods to acquire permissions that enable lateral network movement.

These methods include orchestrating a mini-dump of the LSASS (Local Security Authority Subsystem Service) process memory, obtaining credentials stored in the Active Directory database and exploiting known vulnerabilities in backup software.

Advanced persistence mechanisms

Akira ordinarily deploys tools and techniques like Remote Desktop Protocol (RDP), Server Message Block (SMB), impacket module wmiexec, and a service manager tool known as nssm.exe, in order to gain persistence within systems.

As is the case among many cyber criminal groups, Akira also attempts to uninstall or disable security defenses, including anti-malware and network monitoring tools.

Beyond that, the group tends to use the runas command (a Windows command-line tool that allows for the execution of scripts, apps…etc., with different user permissions from the currently logged-in user) in order to execute commands.

This, in turn, makes tracking hacker activities more difficult for defenders.

Akira and C2 mechanisms

Most ransomware attackers weaponize a command and control (C2) mechanism to execute activities. The C2 system establishes communication with and exerts control over a compromised machine or network.

The C2 server can potentially be used to manage the ransomware deployment and to initiate the encryption of data on targeted systems. For the purpose of establishing persistent remote access to multiple systems within the network, Akira seems to prefer AnyDesk.

Akira and data exfiltration

Akira uses a number of different tools when it comes to data exfiltration. These include WinRAR, WinSCP, rclone, and MEGA.

After data exfiltration, Akira demands a ransom from victims. In the event that the ransom goes unpaid, the group will leak stolen data on its TOR site, as previously mentioned.

Akira’s encryption tactic

To encrypt a given target’s data, Akira relies on a combination of AES and RSA algorithms. The group will also purge Windows Shadow Volume Copies from devices by running a PowerShell command. For victims, this massively complicates the process of independently restoring systems and recovering encrypted data.

Recommended means of preventing and defending against Akira’s ransomware

1. Address identity and access management.

Enhance access controls. Implement multi-factor authentication (MFA). Akira can gain initial access via unauthorized logins to VPNs through accounts that lack MFA. This seemingly simplistic safeguard can significantly limit the risk of unauthorized access.

2. Store credentials securely.

As noted earlier, Akira deploys a variety of tactics to obtain credentials. These tactics include execution of a mini-dump of the LSASS process memory, retrieving credentials stored in the Active Directory database and leveraging vulnerabilities in backup services.

To that effect, organizations need to take care when it comes to credential management. Credentials should be stored securely, and regularly updated. Backup services must also be appropriately secured.

3. Elevate your patch management protocol.

Akira commonly exploits vulnerabilities in VPN software. Thus, regular patching and updating of software can proactively prevent Akira attacks.

4. Monitor your network like a ninja.

Akira relies on built-in commands and tools to identify an environment’s systems and to learn about the status of target devices. Detect duplicitous behavior by monitoring for unusual network activity.

Your organization should also monitor for data exfiltration. Look for substantial data transfers and unusual network patterns.

5. Secure C2 channels.

Akira uses widely recognized dual-use agents, such as AnyDesk, to establish persistent remote access. Remain vigilant in regards to abnormal remote access activities and fortify Command and Control (C2) channels. This can be of tremendous assistance when it comes to thwarting potential attacks.

6. Secure remote desktop protocol.

Akira frequently employes Remote Desktop Protocol (RDP), using legitimate local administrator user accounts to facilitate lateral movement. Enhancing the security of RDP and staying vigilant for atypical RDP activity can be effective in preventing lateral movement.

7. Implement endpoint protection.

Akira usually attempts to uninstall endpoint protections as a means of evading detection. Deploying robust endpoint protection measures and consistently monitoring for efforts to disable or uninstall such safeguards can also assist with attack prevention and detection.

Related resources

The 10 most dangerous ransomware groups right now – Read article

Secure your data. Explore endpoint security solutions – Learn more

Identity and access management solution free trial – Click here

[astralleywright]

similarly people are extremely weird about people disliking ashton and i have seen so many posts insisting that imogen fans or imodna fans are transphobic for "hating on" ashton when i've never seen any ashton hate. like at the very least i have seen a handful of people genuinely despise orym or fcg, but i have literally never seen anyone hate ashton as a character. but i see tons of posts insisting ashton is hated just to shit on the girl characters. someone insisted BEAU was more liked. BEAU.

see this is where you lost me lmao. yesterday after those asks i was actually thinking about how the only time i've seen that "doing feminism in a transphobic way" line of criticism have any merit re: Imodna and Imogen and Laudna fans is back during episode 49 with the reactions to Ashton's "I know loneliness that you don't" comment to Laudna. there was definitely an undercurrent of seeing Ashton as Basically A Man in the way some people discussed that whole thing (someone even called it mansplaining lol).

on that note that was around when i saw someone crossing their fingers that he would die during the solstice explicitly bc they didn't like him so. you see its hard to do these kind of fandom discussions sometimes, bc we have not all seen the same things or visited the same places. and personally I have seen way more hate for Ashton than Orym. maybe even FCG, although I think that's a difference between a lot of people being frustrated or annoyed with FCG vs what I've seen w Ashton which tends to be more openly vitriolic. i've seen like one or two comments ever that I would consider genuine Orym hate, although that might be more of a thing on tiktok apparently.

that said there are some popular blogs that like to pit Ashton stans and Imodna stans against each other, and as a dedicated expert in the field of Ashton/Imodna stannism i would just ask how they feel about taking Ls left and right these last couple months, when we have truly never been stronger