A new email campaign from the threat group uses the attack-simulation framework in a likely leadup to ransomware deployment. The criminal threat group known as TA551 (aka Shathak) has been mounting cyberattacks that start with email thread hijacking. If opened and macros enabled, the attachments ultimately lead to the download of Sliver, an open-source, cross-platform adversary simulation and red-team platform. The activity demonstrates a significant departure from previous tactics, techniques and procedures (TTPs) from TA551, researchers said.”]
Source: https://threatpost.com/ta551-tactics-sliver-red-teaming/175651/