@astra

#infosec, security researcher,

[Anurag @Malwarehunterr]

🚨 Microsoft phishing chain

The initial page on reha-stims[.]com displays a fake Microsoft CAPTCHA, collects the victim's email, IP, device, ISP, and location, then exfiltrates the data to a Telegram bot before redirecting to a fake Microsoft Entra login.

The second stage (login.authmicrosofttauthentication[.]top) closely clones the Microsoft sign-in page and submits credentials to attacker-controlled /common/login endpoints.

IOCs:

- reha-stims[.]com
- login.authmicrosofttauthentication[.]top
- Telegram Bot ID: 8388507424
- Telegram Chat ID: 6529371358

Similar sites:

rehamdticktt[.]top
104.248.209[.]204
mail-mzkt-by.reha-stims[.]com
webmail-customs-go-kr.reha-stims[.]com

#Phishing @MsftSecIntel @skocherhan @500mk500 @abuse_ch @JAMESWT_WT

[@astra @astra524]

@_0b1d1 Pdf

[Raisul Islam @rsraisul_islam]

11. Latte

A new era of video creation. Latte brings your ideas to life by combining AI-generated visuals, music, and realistic sounds.

[Raisul Islam @rsraisul_islam]

10. Elevenlabs

Clone any voice with just one minute of audio. Use text to generate perfectly cloned voice output.

[Raisul Islam @rsraisul_islam]

8. DomoAI

Domo AI quickly generates high-quality anime art and avatars for free. It offers features like video-to-video, picture-to-picture, and picture-to-video, with over 40 styles, including 3D animation and game style.

[Raisul Islam @rsraisul_islam]

7. Ahmia

A search engine that can be used to locate useful websites on the dark web.

[Raisul Islam @rsraisul_islam]

6. Notta Showcase

➽ Notta Showcase is an AI dubbing tool that translates videos into 15 languages, saving you time and money compared to traditional dubbing methods.

[Raisul Islam @rsraisul_islam]

5. PlayHT

Real-time conversations with AI are here!

AI-powered text-to-speech model with latency under 300ms.

[Raisul Islam @rsraisul_islam]

🎁 𝗕𝗢𝗡𝗨𝗦 🎁

✳ Meco App:

Meco is a distraction-free app for reading newsletters outside the inbox. It is packed with incredible features, so you can enjoy your newsletters in an app built for reading.

🔗 https://t.co/EHnRgoudK9

[Raisul Islam @rsraisul_islam]

4. Imglarger

AI toolkits to help you enhance, improve, and clean your photos.

[Raisul Islam @rsraisul_islam]

🛑 𝗪𝗔𝗜𝗧 ✋
20,000+ AI enthusiasts read ‘Unbelievable AI’ daily.
Subscribe today and receive: ⤵️
• 50+ Money-Making Guide
• 50+ AI courses
• 5000+ Prompts
• And more
100% FREE.
Join now for FREE 👇
https://t.co/9C6tOb2ANV

[Raisul Islam @rsraisul_islam]

3. Decktopus AI

The future of presentation production.
Use Decktopus to create stunning presentations in minutes and easily share them with colleagues!

🔗https://t.co/4DjmSwKYQ9

[Raisul Islam @rsraisul_islam]

2. https://t.co/6SnGRYWyga - The first AI Research Agent, deep research on any topic in one click.

→ Write high-quality articles instantly

→ Back them with credible sources

“Research smarter, not harder! CopyOwl handles deep research and finish the final copy for you.”

[Raisul Islam @rsraisul_islam]

1. AiSOAP - #1 AI Medical Scribe with AI SOAP Notes

Try it free today! → 🔗 https://t.co/9SMXMS0G8a

Trust me, it’s a game-changer. 💥

→ AiSOAP records, transcribes, and generates customized SOAP notes, saving you 95% of your charting time. Sounds too good to be true? It’s not. 🙌

[The SecOps Group @TheSecOpsGroup]

🥇 FREE Certified AppSec Practitioner (CAP) exam! 🥇
** No Discount Code Needed**

To get the offer:
1. Retweet this post.
2. Fill this Google form -
📄 https://t.co/WVFmLaO3CZ
3. We will email you the exam details. 💯

🔗 Read more about our CAP exam -
https://t.co/iW47bEhG0s

#pentesting #CAPExam #Applicationsecurity #informationsecurity

[@astra @astra524]

@NahamSec @ekoparty @bugbounty_space @NahamSec @ekoparty and @bugbounty_space
ComeHangOutAtEkoparty

[MalwareHunterTeam @malwrhunterteam]

Tweet about from interesting to very interesting malware/phish/etc: maybe in some days, you can get some dozens of RTs/likes.
Tweet about a vulnerability, in this case SMBGhost: 600+ RTs and 1k likes within a half day.
Okay...
😂

[@astra @astra524]

#apt34 https://t.co/qRumX50WhQ

[@astra @astra524]

CVE-2019-1184 : An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. https://t.co/k1JjcA8RB0

[@astra @astra524]

https://t.co/I0LtgO353H