As we prepare for 2026, we can look back on what happened in 2025 to forecast the types of threats the global community will encounter in the new year. Kasey Best of @SilentPush offers #predictions and #trends to watch out for. https://t.co/tC3P6o35qh
#AI#ransomware#security
Expanding Google Careers phishing indicators with @ValidinLLC Lookalike Domains & @silentpush WHOIS Scanner
807 total indicators - This campaign is massive.
sample regex: /^(apply|hire|start)\.g(recruit|talent|team|app|hiring|hire|career)[a-z]+\.com$/
https://t.co/FLwWZxksKq
The @FBI has reported a series of fake websites impersonating the Internet Crime Complaint Center (IC3) for phishing attacks.
The sites are near pixel perfect copies of the official IC3 site, and are used to gather personal information from users for later targeting with #phishing.
By looking at web content "borrowed" from the official IC3 site, we can discover some of the fake pages with a web query.
Rumors are spreading about a mayor #LawEnforcement operation against #Rhadamanthys#Stealer.
@g0njxa and me have been monitoring the situation closely.
-Rhada domains under active law enforcement control
- Customers are adviced to delete all servers
Image via club1337
NEW THREAT REPORT 🚨 We're tracking the spread of a new malware loader we have named “CountLoader,” that is strongly associated with Russian ransomware gangs. 🇷🇺
Read: https://t.co/RW7a9w5loQ
#countloader#threat#russia#ukraine#cybersecurity#ransomware
@silentpush searching on keywords that are often used by threatactors can bring you to juicy open directories!
hxxp://84.247.147.214:8080/
uhoh, the worst ransomware I have seen.
Our team @silentpush just dropped a definitive look at SocGholish (operated by TA569) and the initial access broker ecosystem they are facilitating. Big thanks to past researchers who have worked on SocGholish! We've got details about our visibility @ https://t.co/BndT67pe3y 🖖🏻
We're seeing lots of similar #phishing domains to those reported by @_JohnHammond 🚨
The actors are using consistent naming schemes and web hosting software that we can capture with a search query.
The actors have also made two other woopsies that we'll show down below👇
In this type of field its important to never rely on one tooling. Nothing is the holy grail in my opinion. So combine the bunch to that overview going.
I just learned that you can use several datasources @silentpush
Lets see what I can find with open-dir datasource.
Fake Google Chrome download site: https://google.[tw].cn/
The SSL cert for this domain has been given by "Google Trust Services". Not think I have to say anything about it...
🤷♂️
Nice and Simple Scattered Spider Pivots - Thanks to Initial Intel and previous posts from @TLP_R3D
1⃣ Regex Pattern And Server Header
2⃣ Regex, Server Header and ASN
3⃣ Regex, Dates, ASN and Name Server
Utilising Domain Search and Web Scanner from @silentpush