Re: [bitfolk] Sophisticated attack against large UK companies, via IT service providers

4 Apr 2017

Graham said:

...
  That URL contains two PDFs ..
 another with indicators of compromise. 
Oh noes, I can find an svchost and Setup.exe ...

:)

If they had (non-broken) hashes of the dodgy versions that might 
actually be useful.

   Ian