Dooku 2.0 Cybersecurity Tactics

The video tutorial explains the sophisticated Dooku 2.0 APT campaign, which operates entirely in memory, concealing data in images. It details the infection process, privilege escalation, payload execution, and lateral movement within a network. The attackers use high uptime servers for reinfection and data exfiltration via HTTP. The video also demonstrates how Javelin technology can disrupt such attacks by obfuscating data and detecting lateral movement attempts.

What is the most likely initial infection vector for Dooku 2.0?

• USB drive

• Spear phishing attack

• Software vulnerability

• Physical access

What does the attacker use to escalate privileges after infecting the machine?

• Social engineering

• Zero-day exploit

• Brute force attack

• Rootkit

Which payloads are used to disable security suites in Dooku 2.0?

• Payloads A and B

• Payloads X and Y

• Payloads Q and K

• Payloads L.G and Hide

Why does Dooku 2.0 use high uptime servers?

• To perform DDoS attacks

• To store stolen data

• To reinfect computers that get disinfected

• To host malicious websites

What is one method Dooku 2.0 uses to move laterally within a network?

• Pass the hash

• SQL injection

• Phishing emails

• Man-in-the-middle attack

How does Dooku 2.0 conceal exfiltrated data?

• Hiding it in JPEG and GIF images

• Encrypting it with AES

• Compressing it into ZIP files

• Storing it in plain text

What protocol does Dooku 2.0 use to funnel traffic to the high uptime server?

• Telnet

• SSH

• SMB pipes

• FTP

What is the main purpose of Javelin technology in the context of Dooku 2.0?

• To detect and disrupt lateral movement attempts

• To provide cloud storage

• To encrypt data

• To enhance network speed

How does Javelin technology obfuscate data during an attack?

• By compressing it

• By deleting it

• By providing false data

• By encrypting it

What happens when the attacker tries to move laterally using Javelin technology?

• The attacker gains higher privileges

• The attacker is detected and fails

• The attacker is redirected

• The attack is successful