Cyber_Warrior 🇮🇳

#ThreatIntel #OSINT #DarkWeb #MalwareAnalysis

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

#CobaltStrike #C2 159.89.113[.]109
Watermark: 1514875149 (New??)

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

@tccontre18 Ha No probs
And also "CertEnrollCtrl.exe" 🧐

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

@inquisitive_int @DailyDarkWeb My bad.. Breached Forums!

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

Yet another binary dropping #Solarmarker #malware #IOC
https://t.co/Eo3ZBYmY5H

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

#SolidBit #ransomware
https://t.co/koAbqeN03U

[MalwareHunterTeam @malwrhunterteam]

Solidbit ransomware...
🤔

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

#Magniber #Ransomware #TTP #IOCs
.MSI File --> UAC Bypass --> Encrypt Files and Delete Shadow Copies
#IOCs MSI Files observed in the wild: https://t.co/kYvDXiesCX

[Bill Demirkapi @BillDemirkapi]

New documents for the Okta breach: I have obtained copies of the Mandiant report detailing the embarrassing Sitel/SYKES breach timeline and the methodology of the LAPSUS$ group. 1/N https://t.co/z05uQYclg9

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

#DEV-0537 (#Lapsus$) targeting organisations with data exfil and destructive attack
https://t.co/qfTOU3RHdm
#microsoft #lapsus #dataleaks

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

LAPSUS$ extortion group has released source code to Bing, Bing Maps, and Microsoft Cortana.
#microsoft #leaks #bing #cortana
#bingmaps

[Sophos X-Ops @SophosXOps]

NEW: Conti and Karma actors attack healthcare provider at same time through ProxyShell exploits

An unpatched Microsoft Exchange Server let both #ransomware actors in; Karma just stole data, while Conti encrypted...

1/15

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

Updated #BlackCat #Ransomware #IoCs and Unique #DarkWeb Sites captured in Configuration.

#Sample #IoCs: https://t.co/lx4Hwr5mKy

#DarkWeb Site: https://t.co/xAcJ76LLJj

[Cyberthint @cyberthint]

Top 10 Most Active #Ransomware Groups in January 2022

Note: This statistic is derived from open source data and Cyberthint's honeypot network.

1. #LockBit
2. #Karakurt
3. #Cryptonicode
4. #BlackCat
5. #Conti
6. #Snatch
7. #Cuba
8. #Grief
9. #Hive
10. #ViceSociety

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

Another #Iranian Group #APT35 #Charmingkitten found to be active linked to #Memento #Ransomware

https://t.co/IiXzYuH7Ft

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

#Iranian group #Muddywater targets #Turkey
https://t.co/DUPUJ5FFf4

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

#Mandiant's analysis on OT information in #ransomware #leak data
https://t.co/2N0gszxEoS
#ics #critical #infrastructure

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

#Iranian group #Muddywater targets #Turkey
https://t.co/DUPUJ5FFf4

[vx-underground @vxunderground]

The exploit code for CVE-2021-20028 has been leaked online. No proof-of-concept code for this exploit currently exists publicly.

Blue Teamers: If you'd like a copy of this exploit please contact us via [email protected]

More info: https://t.co/cJFmJ58yFk

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

New #BlackCat #Ransomware #Sample Detected #iocs #sha256 #threatintel
79802d6a6be8433720857d2b53b46f8011ec734a237aae1c3c1fea50ff683c13

[Cyber_Warrior 🇮🇳 @_CyberHunt_]

A technical report on #Avaddon #Ransomware
https://t.co/r8Nb9pOgV8