Top Tweets for #ClickOnce
#bitter group Microsoft.application Phishing
#ClickOnce
The "application" file is a ClickOnce application deployment configuration file. Its delivered application file operates in a remote installation mode. When clicked by the user, it will remotely install malicious components, create a scheduled task on the device, and periodically access the C2 server to send the device name and username, as well as deliver attack components.
The application file runs in online installation mode, accessing the address of the manifest configuration file to obtain the subsequent file list.
• Online address of the application file: http[:]//www.microsoft365.sangellobrighthouse[.]com/microsoft365/Microsoft.application
• Address of the manifest configuration file: http[:]//www.microsoft365.sangellobrighthouse[.]com/microsoft365/Application Files\Microsoft_1_0_0_9\Microsoft.dll.manifest
◦ ClickOnce deployment file download URL: http[:]//www.microsoft365.sangellobrighthouse[.]com/microsoft365/Application%20Files/Microsoft_1_0_0_9/Launcher.exe.deploy
◦ Core malicious file download URL: http[:]//www.microsoft365.sangellobrighthouse[.]com/microsoft365/Application%20Files/Microsoft_1_0_0_9/Microsoft.exe.deploy
◦ Icon file download URL: http[:]//www.microsoft365.sangellobrighthouse[.]com/microsoft365/Application%20Files/Microsoft_1_0_0_9/ms.ico.deploy
Among them, the core malicious file (Microsoft.exe file) is packaged via dotnet publish. Based on the file size and the structure of the main function, it is judged that the sample is compiled and packaged via dotnet publish with the parameters --self-contained true /p:PublishSingleFile=true.
https://t.co/GyqFZMXKTw
APT group "OneClik" exploits Microsoft ClickOnce and cloud services to target critical infrastructure. Learn how they evade detection and maintain access.
Read more: https://t.co/xkx8QZrZ9e
#CyberSecurity #APT #ClickOnce #Malware #CloudSecurity #EnergySector
🚨 New APT uncovered! 🚨 @TrellixARC reveals #OneClik, targeting energy, oil, & gas via #phishing & Microsoft #ClickOnce. Stealthy "living off the land" tactics make it tough to detect. Full details here: https://t.co/BQ92WQDj5E
Prototyp läuft #WPF #MahApps #Signalr2 #ASP.NET Webforms, #IIS Smtp #Bootstrap und alles per #ChatGPT zusammen gestöpselt und deploy per #clickonce. Ersetzt eine #msgraph Implementierung. Allein das wars schon wert.
If your #MSDynNAV #ClickOnce installer force you to re-install after windows update, here is the solution: https://t.co/6MBFL4O9FA
Just recreated this awesome @SpecterOps (@zyn3rgy, @0xthirteen) technique for initial access by #backdooring a random #ClickOnce application with a Cobalt Strike stager. While I became a ClickOnce addict🙃, compiled a short writeup about my journey: https://t.co/nOerSwV8r1
Nick Powers (@zyn3rgy) and Steven Flores (@0xthirteen) uncover a mechanism of weaponizing legitimate ClickOnce and .NET applications for initial access, presenting new opportunities.
Read their blog: https://t.co/nPbBar5CVo
Day 2 of Modern Initial Access and Evasion Tactics training with @mariuszbit - some #clickonce secret sauce 🤐
I should have been kinder to the Revit API...then it would have been accepted🤔 I'll be posting a series of articles covering the topic nevertheless! An added bonus in the series covers automatic updates of Revit addin's (a bit like #ClickOnce, only it actually works). Stay tuned
I've just submitted my AU 2022 proposal:
Rhino.Inside.Revit for Revit addin development: Why devs SHOULD be using it
Hopefully see everyone there!
@autodesku @rhinoinrevit @McNeelEurope #RhinoInsideRevit
https://t.co/XxWVzoFWUb
Galera dev, especialmente da comunidade #Python:
Que ferramenta de empacotamento/entrega pra instalacao Desktop voces usam? Há anos atrás eu usava #Clickonce pra solucoes #dotNET (gerava aqueles msi installers, lembram?). O que voces usam hoje em dia?
Ooo... Fantastic to see that #ClickOnce is back for both #dotnet5 and #dotnetcore... I actually really like that tech... @LyalinDotCom... #dotNETconf
Announcing .NET 5.0 RC 2 with:
- C# 9 - Improvements on Pattern Matching
- ClickOnce support
- MSI installers are now available for Windows Arm64
https://t.co/Qd7ypeY0zF
#dotnet #dotnetcore #csharp #fsharp #clickonce
@InfosecSapper @hacks4pancakes Ah, agreed! Many services do provide that investigative feature. Can break some things, like these measurements and #clickonce links! :D
One user checked his link via a service that revisited the URL every 15 minutes 24x7 until we ended the test!
#DevOps for the Desktop with @onovotny at #Live360 ❤️❤️❤️ rich client apps. #MSIX is the new #ClickOnce 👍
h #success #entrepreneur ttps:// Do you want to start earning money on your website? #inspiration #homebasedbusiness #smallbiz #clickonce #biz #smallbusiness #smallbusinessmarketing #smallbusinessitsolutions #smallbusinessdevelopment https://t.co/yF0uG9wyGF
Whether it is new code or repackaged apps, #MSIX is the direction to bring these apps to the store and Intune. #AppX #MSI #ClickOnce #AppV packagers - this is the future
https://t.co/MyafB1uXll ClickOnce (Twice, or Thrice) - a Microsoft way to deliver a client payload. #clickonce #redteam #Pentesting #phishing
Announcing the .NET Framework 4.7 #clickonce #Cryptography #csharp #dotnet #visualstudio #Windows10 https://t.co/sQGXWsRgwy
.@vsreleasemgmt Continuously deploy your ClickOnce app from your build server https://t.co/XOTHSSTysR… #ClickOnce #Build #Deploy #VSTS #TFS
Last Seen Hashtags on Sotwe
Most Popular Users
Elon Musk 
@elonmusk
240.2M followers
Barack Obama
@barackobama
119.3M followers
Donald J. Trump
@realdonaldtrump
111.6M followers
Cristiano Ronaldo
@cristiano
109.2M followers
Narendra Modi
@narendramodi
106.9M followers
Rihanna
@rihanna
97.3M followers
NASA
@nasa
92.1M followers
Justin Bieber
@justinbieber
90.6M followers
KATY PERRY
@katyperry
87M followers
Taylor Swift
@taylorswift13
80.8M followers
Lady Gaga
@ladygaga
72.3M followers
Kim Kardashian
@kimkardashian
69.5M followers
Virat Kohli
@imvkohli
68.8M followers
YouTube
@youtube
68.6M followers
Bill Gates
@billgates
63.5M followers
The Ellen Show
@theellenshow
62.5M followers
CNN
@cnn
61.9M followers
Neymar Jr
@neymarjr
61.4M followers
X
@x
60.9M followers
Selena Gomez
@selenagomez
60.1M followers