Marc

[Marc @CTI_Marc]

@davidgobaud @rockkdev @RobinhoodApp @twilio @vladtenev Could you share the full HTML ? Could be interesting to investigate the URL they try to make you click

[Marc @CTI_Marc]

@g0njxa did you have a look to powershell (big) script ? Is there a name for this PS malware ?

[Marc @CTI_Marc]

@solostalking @500mk500 At the end of the page we can see "© 2025 Phantom Security • HackTheBox", could be linked to https://t.co/QtBkyp6OuX

[Marc @CTI_Marc]

@abuse_ch @Bitsight First samples pdb and User Agent use "SystemInfo"

[Sekoia.io @sekoia_io]

🇨🇳 We're excited to announce the publication of the latest Sekoia #TDR team report, « A Three Beats Waltz: The ecosystem behind Chinese state-sponsored cyber threats."

https://t.co/sU2qCjUKHq

[Sekoia.io @sekoia_io]

🔍 TDR investigated the emerging #ClickFix social engineering tactic, which several intrusion sets adopted in 2024 to distribute their malware.

Our research provides a chronological overview of the observed ClickFix campaigns and their victimology.

https://t.co/S39OAJttAp

[Sekoia.io @sekoia_io]

🚨 Discover #Mamba2FA, a previously unknown adversary-in-the-middle (AiTM) #phishing kit, sold as phishing-as-a-service (PhaaS) ⚠️

https://t.co/gmIzApiCRA

[Sekoia.io @sekoia_io]

Since mid-2023, the Sekoia #TDR team has investigated an infrastructure which controls compromised edge devices transformed into Operational Relay Boxes (#ORBs) used to support operations of multiple 🇨🇳 intrusion sets.

Check out the full report ⤵️

https://t.co/2YVw3x3vJP

[JLexFusion @jlexfusion]

Happy to announce my new project!
🚀 Do you use Google Meet? Meet TigerTakes on https://t.co/CB9eLKxL57 – your new meeting assistant! 🎯 Connect our bot directly to your Google Meet sessions and get clear, concise summaries in no time. Sign up for free now!

[Sekoia.io @sekoia_io]

🚨 Sekoia TDR uncovered key insights into the infrastructure behind #Emmenthal Loader distribution using #WebDAV as a service!

Thanks to @CERTCyberdef & @Mandiant for their research, which helped shed light on this! 🙏

Read the full report here:
https://t.co/HYJO4c6zgC

[Sekoia.io @sekoia_io]

Have you ever heard about “#DoppelGänger”? 👀

In our new report, the Sekoia #TDR team analysed the #DoppelGänger campaign's relays, technical infrastructure, and shared narratives.

https://t.co/dXVoLBgCBi

#Influence #InformationWarfare #CTI

[Marc @CTI_Marc]

@r3dbU7z Yeah was aware of that but was wondering how threat actor delivers this payload

[Sekoia.io @sekoia_io]

👀 Discover our new report, which provides an in-depth analysis of cyber threats to elections based on past targeted elections. It identifies various types of cyber operations and proposes an assessment of threats regarding the major elections in 2024.

https://t.co/LdTlYaNpQr

[Censys @censysio]

🔍Discover how to proactively detect malicious activities with Censys data in our next webinar with  @sekoia_io. Explore challenges in monitoring decentralized infrastructures and see MalleableC2 in action📈Book your spot now: https://t.co/j9LqHhdcY7

[Marc @CTI_Marc]

@bigfootcorporal Hello, where did you find this website ?

[Marc @CTI_Marc]

@1ZRR4H @ShanHolo @malwrhunterteam @JAMESWT_MHT @StopMalvertisin @pr0xylife @0xToxin @executemalware @ankit_anubhav @AnFam17 Do you know what is the infection vector ? Phishing email with webdav link ?

[Marc @CTI_Marc]

Very glad to share a part of our 2023 work, don't hesitate if you have any question

[Sekoia.io @sekoia_io]

🕵️ 📡 We are pleased to announce our newest blog post about Sekoia #TDR team (Threat Detection & Research) #adversary #infrastructure tracking capabilities in 2023 ⤵️

https://t.co/FjW2D7UGJY

[Sekoia.io @sekoia_io]

🧵 @sekoia_io tracks C2 infrastructures for main #stealer families sold as a Malware-as-a-Service (MaaS).

Our view of active C2s, combined with our observations from telemetry, forum monitoring and sample tracking, gives us a global understanding of the stealer threat.

⬇️

[Marc @CTI_Marc]

@0xM4R10 @virustotal After some analysis the website is used to deliver StealC malware ! Our report on StealC malware: https://t.co/D4gabdWBbX

( cc @ValeryMarchive )

[Marc @CTI_Marc]

@0xM4R10 Hello, approach is very close to what we published in end 2023: https://t.co/X7wZTsnXdY

Do you still have .exe file ? Can you upload it to @virustotal ?