APT Encounters of the Third Kind
Summary
A detailed security incident narrative where an ordinary security assessment escalates into an incident response involving a malware-infected NFS gateway, covert channels, and kernel patching. The post covers forensic analysis, reverse engineering findings, and the attacker techniques used to exfiltrate PII via a compromised NFS setup.