Top Tweets for #AlienBot
Virus pericolosi e come proteggere il tuo smartphone Android dai malware di Redazione
#Tech #Alienbot #Android #evidenza #flubot #malware #protezione #sicurezza #smartphone #xHelper
https://t.co/ygwFEqfY8Q
[CyberCrime Updates] Mobile #AlienBot malware starts utilizing an incorporated DGA module for communications with a C&C if the last response from a server was more than 12 hours ago.
Sample: 8e7477bedc4719ba7e16b36d855003344822954c6963511625e6a740eea11650
![_CPResearch_'s tweet photo. [CyberCrime Updates] Mobile #AlienBot malware starts utilizing an incorporated DGA module for communications with a C&C if the last response from a server was more than 12 hours ago.
Sample: 8e7477bedc4719ba7e16b36d855003344822954c6963511625e6a740eea11650 https://t.co/fr3riHNqgI](https://pbs.twimg.com/media/FkAcH4fWYAMaDUv.png)
@fr0s7_ @alberto__segura @malwrhunterteam @ex_raritas @V3nkat3 @James_inthe_box @JAMESWT_MHT @hatching_io #AlienBot
"Alienbot is a fork of Cerberus banker first seen in January 2020."
#cerberus c2: androidglobal[.]cf
(Android-Update-1.apk)
sha256:
70e70162c578cdf10df4c0772b1f4b18d6b8ac2f80fc1831166c4a1ab7e7226e
#Android #Turkey #Banking #cerberus #alienbot
@TRCert @malwrhunterteam @500mk500 @ReBensk @JAMESWT_MHT @VK_Intel @bl4ckh0l3z
apk:Android_Gunceleme.apk
#alienbot c2: 34.89.151.222
sha:
f1b8ed0a82acda7611d9f5135193544d511bf34523d2bb75b7d74f27634ed8b7
#Android #Turkey #Banking @TRCert
@malwrhunterteam @500mk500
@ReBensk @JAMESWT_MHT
@UITSEC_CERT @VK_Intel @bl4ckh0l3z
c2: googleupdates[.]cf
(AAndroid-Update.apk)
sha:
22ca0aac892096288f8045199a6bf44689d99321de9b4a549b607e4a0ccfbc31
#Android #Turkey #Banking #cerberus #alienbot
@TRCert @malwrhunterteam @500mk500 @ReBensk @JAMESWT_MHT @UITSEC_CERT @VK_Intel @bl4ckh0l3z
#cerberus c2: 20[.]49[.]203[.]83
(AndroidGuncellem.apk)
sha256:
0249ad4a5a07b12570299a1963195dd5f3ea7d5daa2481f51ad85944122e735a
#Android #Turkey #Banking #cerberus #alienbot
@TRCert @malwrhunterteam @500mk500 @ReBensk @JAMESWT_MHT @UITSEC_CERT @VK_Intel @bl4ckh0l3z
#alien c2: 34[.]89[.]218[.]199
(Android_Guncelleme_obf_8.apk)
sha256:
ed5a0b722af2f3e0f5ae2f7dec7ffd3b0493993ff37947438790a952e8fc1a76
#Android #Turkey #Banking #cerberus #alienbot
@TRCert @malwrhunterteam @500mk500 @ReBensk @JAMESWT_MHT @UITSEC_CERT @VK_Intel @bl4ckh0l3z
Jumpstart your imagination with the fun and oh so quirky illustrative work of @opalunicorn1.
...
#beautifulbizarre #opalunicorn #lowbrowart #bigeyeart #popsurrealism #surrealism #surrealart #newcontemporaryart #illustration #alienart #robotart #alienbot #creepycute #characterart
@ReBensk @malwrhunterteam @Spam404 @bl4ckh0l3z @JAMESWT_MHT @500mk500 @Cengiz86035319 @TRCert #AlienBot #Banker
C&C - girmekanima21[.]com
Ignore battery optimizer to stay alive, change default SMS app and steal banking credentials.
#Android #Alien #Alienbot #malware active in ๐ต๐ฑ
dea978d07ac311a6e5c98704c01c95c5
c2: /ototmootot.com
key: JEJfajsc77hASbdh
campaign: priv12
@B0rys_Grishenko @500mk500 @nazywam @PPiekutowski @pr3wtd @CERT_OPL @apkdetect
@malwrhunterteam @JosepAlbors @danlopgom #Alien #Alienbot #Malware
{
"c2s": [
"http[:]//trafpop22.xyz"
],
"campaign": "Android_update20.5",
"key": "IJAsikdhASdhhi"
}
@pr3wtd @B0rys_Grishenko @500mk500 @CERT_OPL
It's seems Spain hardly gets any break from Android malware operators...
New #github #malware repo with Correos apk samples.
https://t.co/eSMTo5Rj0W
With #Alien #Alienbot
c2: /siopoloiop.ga
@danlopgom @malwrhunterteam @B0rys_Grishenko @500mk500 @0xabc0 @CERT_OPL @nazywam @pr3wtd
#Android #Alien #Alienbot #Malware activity p.2:
16760355c1599630808b3f0af2cf404f
c2:/yildzlarbzmicinyagiii33.com
c2:/birsuredahakalinanbanaohguu.com
App Name: EBA.apk
@B0rys_Grishenko @CERT_OPL @500mk500 @pr3wtd @nazywam @ReBensk @malwrhunterteam @bl4ckh0l3z
New sample of #Alien #Alienbot #Android #Malware spotted today in the wild. This time using Authenticator--2FA disguise.
f7c72fe3df7a5e8aecf89a175fd77145
c2:/filmshotss.com
@B0rys_Grishenko @CERT_OPL @nazywam @500mk500 @pr3wtd @CSIRT_KNF @yodakazi @bl4ckh0l3z
@ReBensk @malwrhunterteam @Spam404 @bl4ckh0l3z @JAMESWT_MHT @500mk500 Looks like #Alien #alienbot
Some config here:
{
"c2s": [
"http[:]//hotstarred14.xyz"
],
"campaign": "DHL-TRACKING",
"key": "IJAsikdhASdhhi"
}
Seems those domains are related to this key as well: /pickredd21.xyz
/redhoot321.xyz
/pickred261.xyz
#ThreatProtection #Symantec mobile users are protected from #Clast82 and #Alienbot, read more: https://t.co/J5tg8bZJuQ
Uwaga @BankMillennium Faลszywa aplikacja Bank Millennium.apk (235a2024af81d224bd13985de719cd2e) na:
https://t.co/eWdro75iMA
W ลrodku #Android #Banker #Cerberus
c2:/bluebluesy.top, /shiftedpool.top
@apkdetect @pr3wtd @CERT_OPL @CERT_Polska @CSIRT_KNF @B0rys_Grishenko
Last Seen Hashtags on Sotwe
Most Popular Users
Elon Musk 
@elonmusk
241.7M followers
Barack Obama
@barackobama
119M followers
Cristiano Ronaldo
@cristiano
114.5M followers
Donald J. Trump
@realdonaldtrump
111.9M followers
Narendra Modi
@narendramodi
107.2M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.4M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.4M followers
Kim Kardashian
@kimkardashian
70.9M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66.4M followers
Bill Gates
@billgates
65.2M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.3M followers
CNN
@cnn
61.8M followers
X
@x
60.7M followers