-🦉

🦉

[Germán Fernández @1ZRR4H]

Un nuevo actor de amenazas afirma haber comprometido a la Tesorería General de la República de Chile 🇨🇱 los datos expuestos parecieran venir de la explotación de una vulnerabilidad de inyección SQL.

Atento @tgrchile, hay algunos usuarios y proveedor, me parece que deben validar.

[-🦉 @Dashowl]

Some webshells. Dropped by the WSO2 RCE

https://t.co/fB30smHrM9

[-🦉 @Dashowl]

hxxp://185.25.50.239:8080/ #opendir

[-🦉 @Dashowl]

@jaydinbas hxxps://naveicoipc[.]tech/prv/ 🤔

[-🦉 @Dashowl]

Watching the shutdown of many conti´s onion sites

[-🦉 @Dashowl]

#Phishing against @Office365 hosted by @digitalocean
hxxps://tatacommunicationsltd.com/

[-🦉 @Dashowl]

Possible real ip behind one of the onion sites in the conti leak
hxxps://185.14.28.109/crpanel/

[-🦉 @Dashowl]

#Phishing against @rabobank hosted by @Namecheap
hxxp://deskra-bonl.info/

[-🦉 @Dashowl]

#Phishing against @golden1cu behind cloudflare
hxxps://gholden1.com/

[-🦉 @Dashowl]

#Phishing against @Office365 hosted by @bluehost
hxxps://persain-co.com/aa/off/

[-🦉 @Dashowl]

#Phishing against @FINN_no hosted by @Namecheap
hxxps://finnkontrakt.online/payment/

[-🦉 @Dashowl]

#Phishing against @AskAIB hosted by @Root_Layer
hxxps://login-helpcentre.com/aib/login.php

[-🦉 @Dashowl]

#Phishing against @AmericanExpress hosted by @MicrosoftHelps
hxxps://express-locked.com/american/

[-🦉 @Dashowl]

#Phishing against @creditandorra hosted by @ContaboCom
hxxps://creditando.net/on/Online_e-credit/e-Credit.php

[-🦉 @Dashowl]

Not surprised about that many users that were in the old trickbot's gitlab site are inside the conti leaks files

[-🦉 @Dashowl]

#Phishing multi-wallet hosted by @Namecheap
hxxps://authtxnweebly.com/validate/

[-🦉 @Dashowl]

#Phishing against @ChaseSupport hosted by @Cyrusone
hxxps://jp02sec.com/auth/

[-🦉 @Dashowl]

#Phishing against https://t.co/bRJnB8DMlc hosted by @web4africa
hxxps://nydolsecurity.com/accessclaims/

[-🦉 @Dashowl]

@WalletConnect #phishing
hxxp://cosmoskldznft.com/verify-wallet/coins/

[-🦉 @Dashowl]

#opendir server maybe for phishing sites hosted in Russia
C2?: hxxp://45.67.230.104/caller/

#opendir Child site:
hxxs://b04.us/