Top Tweets for #BasBanke
@malwrhunterteam @JAMESWT_MHT @bl4ckh0l3z Seems to be a Brazilian banker.. Probably a new version of #BasBanke using WebSockets to connect to the C2.. Here some commands, overlay code for banks..
C2:
ws://198.187.28.71:2001/hakon
hxxp://198.187.28[.]71:2001/upload (VNC: it sends POST request with screenshots)
![alberto__segura's tweet photo. @malwrhunterteam @JAMESWT_MHT @bl4ckh0l3z Seems to be a Brazilian banker.. Probably a new version of #BasBanke using WebSockets to connect to the C2.. Here some commands, overlay code for banks..
C2:
ws://198.187.28.71:2001/hakon
hxxp://198.187.28[.]71:2001/upload (VNC: it sends POST request with screenshots) https://t.co/o5rwALWng8](https://pbs.twimg.com/media/E6fkzMmWYAAfSGe.png)
#opendir IP contain 2 differnet malware C2
191.232.233.]32
/man/ is C2 of #MetaMorfo/#MeKotio
https://t.co/dz87YVmRkD
/Android/ folder is C2 of #BasBanke/#CoyBot Android malware(as the folder name suggests..)
https://t.co/im50gz8a3I
Both targeting Brazilian banks.🇧🇷
⚠️ Nueva campaña 2020 de #BasBanke o Coybot, el troyano bancario para Android, de origen brasileño y dirigido a usuarios de 🇧🇷🇨🇱🇺🇸
Live sample 🔥 https://novasdeapk[.]xyz/site/
- 11 Bancos y más de 35 servicios online.
- C&C en: http://3.89.48[.]182/Android/ponto.php
![1ZRR4H's tweet photo. ⚠️ Nueva campaña 2020 de #BasBanke o Coybot, el troyano bancario para Android, de origen brasileño y dirigido a usuarios de 🇧🇷🇨🇱🇺🇸
Live sample 🔥 https://novasdeapk[.]xyz/site/
- 11 Bancos y más de 35 servicios online.
- C&C en: http://3.89.48[.]182/Android/ponto.php https://t.co/kOfc2U32kD](https://pbs.twimg.com/media/EN-ox1YX4AAsWxp.jpg)
Campaña de troyano bancario BasBanke afectando a Brasil, este tipo de malware podría distribuirse en LATAM. https://t.co/NjhqFIuQUL
#bankingtrojan #ThreatHunting #CyberSecurity #ciberseguridad #BasBanke #malware #LATAMCybersecurity
“BasBanke”: Android Malware That Hacks Financial/ Personal Data! https://t.co/PHbNOsCUbf #AndroidMalware #BasBanke #Businesshacking

Last Seen Hashtags on Sotwe
minichat video
Seen from Canada
فيمبوي
Seen from Oman
minichat((((((()))))))* filter:native_video
külotluçorap
Seen from Turkey
pakistani #hijabi
TMV
Seen from Turkey
minichat ()filter:videos
Seen from United States
blacked
Seen from United States
minichat
Seen from Canada
kontolin
Seen from Indonesia
Trends for you
Most Popular Users

Elon Musk 
@elonmusk
241.7M followers

Barack Obama 
@barackobama
119M followers

Cristiano Ronaldo 
@cristiano
114.4M followers

Donald J. Trump 
@realdonaldtrump
111.8M followers

Narendra Modi 
@narendramodi
107.2M followers

Rihanna 
@rihanna
98.7M followers

NASA 
@nasa
92.4M followers

Justin Bieber 
@justinbieber
91.8M followers

KATY PERRY 
@katyperry
90M followers

Taylor Swift 
@taylorswift13
83.9M followers

Lady Gaga 
@ladygaga
75.4M followers

Virat Kohli 
@imvkohli
73.3M followers

Kim Kardashian 
@kimkardashian
70.9M followers

YouTube 
@youtube
68.8M followers

Neymar Jr 
@neymarjr
66.3M followers

Bill Gates 
@billgates
65.1M followers

Selena Gomez 
@selenagomez
63M followers

The Ellen Show
@theellenshow
62.3M followers

CNN 
@cnn
61.8M followers

X 
@x
60.7M followers

![alberto__segura's tweet photo. @malwrhunterteam @JAMESWT_MHT @bl4ckh0l3z Seems to be a Brazilian banker.. Probably a new version of #BasBanke using WebSockets to connect to the C2.. Here some commands, overlay code for banks..
C2:
ws://198.187.28.71:2001/hakon
hxxp://198.187.28[.]71:2001/upload (VNC: it sends POST request with screenshots) https://t.co/o5rwALWng8](https://pbs.twimg.com/media/E6fjHfsWEAInvVW.png)
![alberto__segura's tweet photo. @malwrhunterteam @JAMESWT_MHT @bl4ckh0l3z Seems to be a Brazilian banker.. Probably a new version of #BasBanke using WebSockets to connect to the C2.. Here some commands, overlay code for banks..
C2:
ws://198.187.28.71:2001/hakon
hxxp://198.187.28[.]71:2001/upload (VNC: it sends POST request with screenshots) https://t.co/o5rwALWng8](https://pbs.twimg.com/media/E6fiyKyXMAQeKEx.png)
![alberto__segura's tweet photo. @malwrhunterteam @JAMESWT_MHT @bl4ckh0l3z Seems to be a Brazilian banker.. Probably a new version of #BasBanke using WebSockets to connect to the C2.. Here some commands, overlay code for banks..
C2:
ws://198.187.28.71:2001/hakon
hxxp://198.187.28[.]71:2001/upload (VNC: it sends POST request with screenshots) https://t.co/o5rwALWng8](https://pbs.twimg.com/media/E6figiiWYAYnMml.png)


![1ZRR4H's tweet photo. ⚠️ Nueva campaña 2020 de #BasBanke o Coybot, el troyano bancario para Android, de origen brasileño y dirigido a usuarios de 🇧🇷🇨🇱🇺🇸
Live sample 🔥 https://novasdeapk[.]xyz/site/
- 11 Bancos y más de 35 servicios online.
- C&C en: http://3.89.48[.]182/Android/ponto.php https://t.co/kOfc2U32kD](https://pbs.twimg.com/media/EN-ox00WAAAmbPx.png)
![1ZRR4H's tweet photo. ⚠️ Nueva campaña 2020 de #BasBanke o Coybot, el troyano bancario para Android, de origen brasileño y dirigido a usuarios de 🇧🇷🇨🇱🇺🇸
Live sample 🔥 https://novasdeapk[.]xyz/site/
- 11 Bancos y más de 35 servicios online.
- C&C en: http://3.89.48[.]182/Android/ponto.php https://t.co/kOfc2U32kD](https://pbs.twimg.com/media/EN-oxy9WoAAO4nA.png)
![1ZRR4H's tweet photo. ⚠️ Nueva campaña 2020 de #BasBanke o Coybot, el troyano bancario para Android, de origen brasileño y dirigido a usuarios de 🇧🇷🇨🇱🇺🇸
Live sample 🔥 https://novasdeapk[.]xyz/site/
- 11 Bancos y más de 35 servicios online.
- C&C en: http://3.89.48[.]182/Android/ponto.php https://t.co/kOfc2U32kD](https://pbs.twimg.com/media/EN-oxy3WkAEl7ZI.jpg)





