Sumit Janmejai

Cyber Security | Data Science | VIZ | Learner | Traveler | Wisdom Seeker

[Nicolas Krassas @Dinosn]

SillyRAT - A Cross Platform Multifunctional (Windows/Linux/Mac) RAT https://t.co/EBjj0NRRA8

[Microsoft Threat Intelligence @MsftSecIntel]

There has been a spike in email campaigns using HTML smuggling to deploy banking Trojans, RATs, and ransomware. Attackers use this technique to build malware on a device via the browser instead of passing payloads directly through the network. Details: https://t.co/wNmjXRX9Pe

[Microsoft Threat Intelligence @MsftSecIntel]

We recently discovered the latest variant of a Mac malware tracked as UpdateAgent (aka WizardUpdate) with new persistence and evasion tactics, the latest in a series of upgrades over the past year. Given its history, this Trojan will likely continue to grow in sophistication.

[CISA Cyber @CISACyber]

Microsoft has released information on a widespread malicious email campaign carried out by a cyber actor they identify as NOBELIUM. See https://t.co/JFuPkqCp15 #Cybersecurity #InfoSec

[Microsoft Threat Intelligence @MsftSecIntel]

In the past few months, Microsoft has been tracking a dynamic campaign targeting the aerospace and travel sectors with spear-phishing emails that distribute an actively developed loader, which then delivers RevengeRAT or AsyncRAT.

[Microsoft Threat Intelligence @MsftSecIntel]

We’re tracking an active credential phishing attack targeting enterprises that uses multiple sophisticated methods for defense evasion and social engineering. The campaign uses timely lures relevant to remote work, like password updates, conferencing info, helpdesk tickets, etc.

[Sumit Janmejai @SJanmejai]

@azmat_thinks @KaushalApp Great Initiative guys! Just what the Bharat needed in these difficult times 👏👏

[Amit Janmejay @AmitJanmejay]

Many Wishes for a great cause. Best of luck . #PMOIndia #ModiJiAt70 #AtmaNirbharBharat #VocalForLocal #kaushalapp #oneyog

[Sumit Janmejai @SJanmejai]

Exclusive: Obscure Indian cyber firm spied on politicians, investors worldwide https://t.co/nsuWbst6FG

[Tillmann Werner (inactive) @nunohaien]

Thread: High performance computing labs are currently reporting breaches. Malicious ELF64 binaries are being placed under /𝚎𝚝𝚌/𝚏𝚘𝚗𝚝𝚜/.𝚏𝚘𝚗𝚝𝚜 (suid-root loader) and /𝚎𝚝𝚌/𝚏𝚘𝚗𝚝𝚜/.𝚕𝚘𝚠 (log cleaner). Germany seems to be impacted the most with several victims.

[Sumit Janmejai @SJanmejai]

Lazarus group's first piece of in -memory malware on Apple OS https://t.co/ZJq46IZjFR

[Vitali Kremez @VK_Intel]

2020-05-01:🆕🔥#Ragnarok (!RagnarLocker) #Ransomware
Disables Windows Defender | Possible #EternalBlue Exploit Spreader with *NIX config setup
✅#YARA Signature + Extracted Configuration ⬇️
https://t.co/Znhsd6OWKG

h/t @malwrhunterteam | @JakubKroustek

[TracyMG @mg2_tracy1]

#APT #Lazarus #APT38
another new sample:
hash:a1c41c37f5e097c613a81ff236164853
filename: 이력서.hwp

[blackorbird @blackorbird]

Threat landscape for industrial automation systems
https://t.co/Du3TGqYNk0

[Sumit Janmejai @SJanmejai]

@AkbarTravelsIN I have sent emails, but no satisfactory reply yet.

[Sumit Janmejai @SJanmejai]

@AkbarTravelsIN Hi, I have booking with AI 177 - pnr JRV4H flight to London on 24 March. Is this flight cancelled? Will you book me to other flight/day or will you refund please?

[Sumit Janmejai @SJanmejai]

@gk492 @airindiain Did you get any info? I am due to catch the same flight.

[Sumit Janmejai @SJanmejai]

@airindiain kindly update status of AI 177 BLR-LHR on 24th Mar? No clear communication. I have been following up with cc on phone line.

[Sumit Janmejai @SJanmejai]

@airindiain is AI -177 BLR-LHR cancelled on 24th Mar? Will you refund or reschedule?