Release of RedMimicry v1.1.7

RedMimicry v1.1.7 is available, adding three new emulations to the Playbook library and additional platform features.

ClickFix on macOS. A macOS take on the ClickFix technique, where a user is socially engineered into running malicious code that establishes command-and-control.

FrostyNeighbor. A multi-stage JavaScript dropper campaign modeled on the Belarus-aligned actor tracked as UNC1151 / Ghostwriter, known for targeting European government and diplomatic organizations.

Abusing trusted software. A chain that abuses the code-execution features of legitimate, installed software to run attacker code.

Under the hood, existing Playbooks were retested and hardened against EDR systems, and we shipped a set of reliability and stability improvements across the platform.

Existing customers can update from the System page in their RedMimicry instance. If you would like a walkthrough of the new content, get in touch.