2024-08-06 (Tuesday): We found a #Xerxes Android #botnet server on 144.217.61[.]133 that was active until Monday. Pivoting on data from the server, we found two domains used for other Xerxes botnet servers in 2023. More info at https://t.co/syaUCMbzpi
Stargazers Ghost Network continuing to push malware on GitHub.
Sampling the data today, found Lumma Stealer under the repo name "Fortnitehck-seuj".
SHA256: d326e987fdb5fe5da2b52e73556a382ff945b526c4394c7747f26bc8be08d136
https://t.co/A6yNRU3iWD
#lummastealer
With the release of #MaaS#BunnyLoader 3.0, our researchers distill the information gained from new samples of this upgraded malware.
Capable of #CredentialStealing and more, this article provides a thorough overview of BunnyLoader’s progression: https://t.co/vDkpZ08CDm
With the release of #MaaS#BunnyLoader 3.0, our researchers distill the information gained from new samples of this upgraded malware.
Capable of #CredentialStealing and more, this article provides a thorough overview of BunnyLoader’s progression: https://t.co/vDkpZ08CDm
#MedusaRansomware gang launched a dedicated leak site as part of their multi-extortion strategy. This article covers their victimology, toolkit and an ind-depth look at their #TTPs — a close examination of the literal gaze of Medusa’s binary. https://t.co/hcvEISaKjp
Virtually attending CYBERWARCON this week. Excited to check out the conference for the first time. Curious to hear the talk from @cglyer on RomCom malware usage 🤘
#CYBERWARCON
2023-10-17 (Tuesday): We have been monitoring #RemoteCodeExecution vulnerability CVE-2023-3519 affecting #CitrixNetScaler products in the wild. This is a recent snapshot of associated activity. Indicators available at https://t.co/EUjkf1a1ea #CVE20233519#TimelyThreatIntel
Defeating API Hashing Using x32dbg and Conditional Breakpoints.
By setting simple log conditions on functions related to API hashing, you can quickly print out decoded hash values without needing to identify or reverse the hashing algorithm.
[1/11]
#Malware
My team is hiring for a Reverse Engineer at Unit 42. If you feel like you might be a good fit then take a look at the job posting. Hot off the press as of today.
#unit42#reverseengineer#malware
https://t.co/jZ69cVVTdm
@CryptoprenuerUK On https://t.co/MQ1MgCVKHW this is what I used to find interesting exfil tooling, typically seen in incident response cases for ransomware.
web.body="chisel.exe"