144 Cobalt Strike stage 2 IP's, with 145 unique configurations, identified today. Find them here: https://t.co/4Vvbtzfels
Warning: These IP's have not been vetted, block at your own risk.
This is from a compromised Youtube account sharing videos to distribute #Redline Stealer
Here's the analysis https://t.co/dmKGWd4HaS
Threat actors started asking for @PayPal donations, to
paypal[.]me/RuskeyMusic
Are logs business that bad u need to beg money?? 😂
Spark RAT
ITW :
https://cdn.discordapp[.]com/attachments/1094077300041068585/1094087837592334458/servicesGerencia.exe
41fa51816abea20a91900edaf46d8512
Signed with "NUTRI GENETICA RESEARCH BRASIL LTDA"
C2 : 130.185.238[.]251:7777
#SparkRAT#GoRAT#RAT#IOC
Three bad posts to start the week.
St. Mary’s Catholic School, Lutheran Social Services of New York and Unity College have been posted by LockBit.
/stmarys.net
/unity.edu
/lssny.org
Actor : LockBit
Victim : https://t.co/SUF8VN9jlC
Date : 2023-05-08 10:29 UTC +3
According to the #DarkWeb#Ransomware activity by the ThreatMon Threat Intelligence Team, the “#LockBit” Ransomware group has added https://t.co/SUF8VN9jlC to its victims.
Actor : LockBit
Victim : https://t.co/WfCQ5UUmdE
Date : 2023-05-08 10:29 UTC +3
According to the #DarkWeb#Ransomware activity by the ThreatMon Threat Intelligence Team, the “#LockBit” Ransomware group has added https://t.co/WfCQ5UUmdE to its victims.
Actor : LockBit
Victim : https://t.co/0HrvGspbWX
Date : 2023-05-08 10:29 UTC +3
According to the #DarkWeb#Ransomware activity by the ThreatMon Threat Intelligence Team, the “#LockBit” Ransomware group has added https://t.co/0HrvGspbWX to its victims.