BHIS Details Aur0ra-Attributed Intrusion Using Disguised Xray-Core C2
BHIS ActiveSOC describes an Aur0ra-attributed intrusion involving vishing after email bombing, disguised Xray-core C2, noisy lateral movement, log clearing and in-place encryption. The report includes Sigma detections and remediation steps.