<?xml version='1.0' encoding='UTF-8'?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0"><channel><title>ActiveSOC Blog</title><link>https://activesoc.blackhillsinfosec.com</link><description>Detection engineering and incident response from the BHIS SOC.</description><docs>http://www.rssboard.org/rss-specification</docs><generator>python-feedgen</generator><lastBuildDate>Wed, 19 Aug 2026 20:10:38 +0000</lastBuildDate><item><title>Introducing the Aur0ra Ransomware Group</title><link>https://activesoc.blackhillsinfosec.com/blog/introducing-the-aur0ra-ransomware-group/</link><description>The ActiveSOC responds to an Aur0ra intrusion: email bombing and vishing for access, a disguised Xray-core tunnel for C2, and a custom per-victim locker.</description><guid isPermaLink="false">https://activesoc.blackhillsinfosec.com/blog/introducing-the-aur0ra-ransomware-group/</guid><pubDate>Tue, 18 Aug 2026 22:38:33 +0000</pubDate></item></channel></rss>