Andy Morales retweeted
Check out our new blog about GOOTLOADER and notable changes to the TTPs by #UNC2565. We are covering the various methods used by the malware to obscure its code, as well as provide scripts that can automate the deobfuscation process.
#GOOTLOADER #Mandiant
mandiant.com/resources/blog/…
