Noberus - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/actors/noberus/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 10 Nov 2026 03:09:13 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgWindows Server SMB MaxMpxCt registry configurationhttps://feed.craftedsignal.io/briefs/2026-11-maxmpxct-registry/Tue, 10 Nov 2026 03:09:13 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-maxmpxct-registry/BlackCat ransomware operators have been observed modifying the "MaxMpxCt" registry value to handle a higher volume of network traffic.The "MaxMpxCt" registry value specifies the maximum outstanding network requests for the server per client, used when negotiating a Server Message Block (SMB) connection. Ransomware threat actors and operators (specifically BlackCat) have been observed increasing this value to handle a higher volume of traffic.

Notes

If the MaxMpxCt value is set beyond 125, older Windows 9x clients will fail to negotiate SMB connections.

]]>lowthreat