PrintNotifyPotato

Reported Context (1)

PlugX and BadIIS, as well as to run various credential-harvesting utilities that include Mimikatz, PrintNotifyPotato, BadPotato and GodPotato. The commands used by the attacker to gather system details and dump DragonRank Compromises IIS Servers to Deploy PlugX and BadIIS for SEO Fraud

Malware (2)

People (1)

Threat Actors (2)

MITRE ATT&CK (14)

Vendors (1)

Products (12)

Tools (7)

Industries (13)

Countries (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.