Our team capture a new APT group as Actor240524 which targeting Azerbaijan and Israel on July 1, 2024 ,we naming the new type of Trojan program used by the group as ABCloader and ABCsync.
https://t.co/2pcPKaGjd1
We released a tactical analysis report about this #APT#DarkPink campaign
https://t.co/TsRLh9Lquu
https://t.co/D2wxuHCi3D
Thanks @RexorVc0 and @xanda for sharing!
#APT#DarkPink#CVE202338831
zip files:
dd9146bf793ac34de3825bdabcd9f0f3
5504799eb0e7c186afcb07f7f50775b2
c5331b30587dcaf94bfde94040d4fc89
dropper:
6a3948a3602f11e58d8a9300d50984d6
final payload is #TelePowerBot
In September, @NSFOCUS_Intl global threat hunting system monitored several new #botnet variant families developed based on #Mirai, among which #hailBot, #kiraiBot and #catDDoS are the most active, are accelerating their spread, and are widely deployed. https://t.co/lnLoQArXs9
.@NSFOCUS_Intl discovered a previously unknown advanced persistent threat group targeted victims using an American Red Cross blood drive phishing lure and two novel trojan horse malware tools. #cybersecurity#infosec#ITsecurity
https://t.co/WcIkVDP5qh
#APT#DarkPink#CVE202338831
zip files:
dd9146bf793ac34de3825bdabcd9f0f3
5504799eb0e7c186afcb07f7f50775b2
c5331b30587dcaf94bfde94040d4fc89
dropper:
6a3948a3602f11e58d8a9300d50984d6
final payload is #TelePowerBot
The author of #Tbot( #RobinBot ) is an avid racial discriminator, leaving "#fucking.blackpeople.lol" in the latest version of Botnet.
hash: 4b4ba7527786d48192c5c970927416b1
Recently, a new type of Botnet family calling itself #Kirin is spreading widely, which is modified from Gafgyt code but with many new changes.
CC:#37.44.238.182
hash:#43dc824d5c5a0f1dcd5cbbd42c86ce86
We recently discovered a new Botnet family written in Golang, which is spread in the name of "#Bins_Bot_hicore" and supports multiple DDoS attack methods. It has gone through multiple version updates. We name this family "hicoreBot".
#GobotV1
Recently, we found that a #Botnet claiming to be #Kosha Qbot Variant is being built rapidly
hash:83734a32709d9667cc136b9cedf71d7360ec574d527f4a87744f436676b2e7fd
Recently, our researchers have discovered a new #Botnet family called "#Peachy Botnet", which is constructed in a very simple way and is rapidly iterating versions.
connect:37.0.11[.]160