TL

[TL @TL99180575]

#AMDGaming #Cyberpowerpc

[TL @TL99180575]

#ENreco

[Yamaha Guitar Japan @yamahaguitar_jp]

／
ぼっちちゃん
#PACIFICA 購入御礼🎸
＼

作中に登場するPACIFICA611をモデルに制作した
「後藤ひとりのPACIFICA」※非売品
2名にプレゼント🎁

■応募方法
1⃣@BTR_animeとこのアカウントをフォロー
2⃣本ツイートをRT

応募規約・詳細は ⬇️
https://t.co/zMw9JZFrfo

#ぼっち・ざ・ろっく
#Yamaha

[TL @TL99180575]

4. Instead of downloading the Flash exploit from Github, this downloads from githack[.]com .
5. The Flash exploit I got is CVE-2014-0515??!!
6. popcash[.]net is again the gate.
7. The 56 in 56[.]kywrmfmp[.]xyz is randomly generated from 1-60.

2/2

[TL @TL99180575]

tl;dr I don't know what this is

1. I thought this was #SpelevoEK, but the .xyz domain doesn't match the usual pattern.
2. Then #MagnitudeEK or #GrandsoftEK as this targets Korean servers, but the current M/G EKs are different.
3. #LordEK has checkFlash but different name?
1/2

[TL @TL99180575]

Rig EK caught using CVE-2019-0768 a few days ago.

#RigEK

[TL @TL99180575]

The sample has trouble infecting the honeypot. Investigating...
#MagnitudeEK

[TL @TL99180575]

Underminer EK using the Rabbit stream cipher (also RC4 but who cares about that.)

#underminerek

[TL @TL99180575]

Fallout EK has been busy in the last 2 days.

140.[82].[49].[105]

#FalloutEK

[TL @TL99180575]

Abstract painting #Stadia

[TL @TL99180575]

This popped up in the last couple of hours...Looks like Fallout EK. No malicious flash files though :o

Everything's inside SSL btw.

[TL @TL99180575]

From an exploit kit sample last night.

Good job, @TrendMicro

#exploitkit