From SEO Poisoning to Custom RMM and Cobalt Strike | THL

An intrusion investigation by Threat Hunting Labs and MalBear Labs tracing RVTools SEO poisoning, custom RMM tooling, Cobalt Strike, SystemBC, and attempted pivots.