The Sea Turtle threat actor compromised legitimate cPanel accounts, potentially through brute force attacks or credential stuffing, to gain initial access to target systems. This allowed them to establish a foothold and conduct further malicious activities within the victim’s IT infrastructure.
Tag: Sea Turtle
Sea Turtle
The attacker is actively scanning the internet for vulnerable hosts, and then compromising those hosts for future malicious activity.