The MacroPack framework, initially designed for Red Team exercises, is being abused by threat actors to deploy malicious payloads, including Havoc, Brute Ratel, and PhatomCore. Security researchers at ...

EDRSilencer, a tool frequently used in red-team operations, is being co-opted by the dark side in malicious attempts to identify security tools and mute security alerts. As an open source endpoint ...

Threat actors are leveraging a tool designated for red team exercises, MacroPack, to deploy malware, according to Cisco Talos. The researchers discovered several related Microsoft documents uploaded ...