#Fareit - Twitter Hashtag

over 2 years ago

#ThreatProtection #Pony, also known as #Fareit stealer, continues to hold significance in the threat landscape, read more about Symantec's protection: https://t.co/zMVq6PPoRV #botnet #CyberSecuirty

0

1

2

0

2K

Aaron Jornet

@RexorVc0

over 2 years ago

📡 #Pony | #Fareit New quick-analysis of this #malware #stealer #loader and #bot. Used by several #TA 🔗Full Analysis: https://t.co/IfSZQOS4Ch ⛓️ #Phishing | ExploitKit > #Pony > Drop copies/aux files >Auto-Delete> Persistence > Injection >Steal info > #C2 #RE #intel #threat

RexorVc0's tweet photo. 📡 #Pony | #Fareit New quick-analysis of this #malware #stealer #loader and #bot. Used by several #TA

🔗Full Analysis: https://t.co/IfSZQOS4Ch

⛓️ #Phishing | ExploitKit > #Pony > Drop copies/aux files >Auto-Delete> Persistence > Injection >Steal info > #C2

#RE #intel #threat https://t.co/pX2yB7YdYu

2

79

34

17

7K

ESET Research

@ESETresearch

about 4 years ago

Another threat supporting the 121% growth of downloaders between T3 2021 and T1 2022, was MSIL/TrojanDownloader.Agent. Four of its top five variants were downloading the final payloads – including #AgentTesla, #Fareit, and MSIL/Agent.CFQ – from the #Discord platform. 3/4

1

5

0

SpamAuditor

@SpamAuditor

almost 5 years ago

Nothing new here, but this #Spammer is using @digitalocean IPs with cheap $1 .bar domains on sale @Porkbun to send #malspam #Spoofs @DHL and @HSBC Payloads #Dridex #Fareit CVE-2018-0802 @ActorExpose @JCyberSec_ @illegalFawn @nullcookies @malwrhunterteam @malware_traffic

SpamAuditor's tweet photo. Nothing new here, but this #Spammer is using @digitalocean IPs with cheap $1 .bar domains on sale @Porkbun to send #malspam

#Spoofs @DHL and @HSBC

Payloads
#Dridex
#Fareit
CVE-2018-0802

@ActorExpose @JCyberSec_ @illegalFawn @nullcookies @malwrhunterteam @malware_traffic https://t.co/IMQ4IPrTDs

1

4

1

0

Hatching @hatching_io

almost 6 years ago

#Smokeloader making sure noone gets left out here Sample deploys #AgentTesla, #AZORult, #PlugX, #Pony/#Fareit and #Redline stealers/RATs https://t.co/Pnf1UAb4P7

hatching_io's tweet photo. #Smokeloader making sure noone gets left out here

Sample deploys #AgentTesla, #AZORult, #PlugX, #Pony/#Fareit and #Redline stealers/RATs

https://t.co/Pnf1UAb4P7 https://t.co/JH9ckSlnW4

1

14

1

0

reecDeep @reecdeep

about 6 years ago

#malspam #pony #fareit #Malware targets #Italy 🇮🇹 #opendir CARRARA S.p.A. - NS. OFFERTA analysis: https://t.co/vB1HxadaTr c2: kboyud[.com @csirt_it @guelfoweb @Bl4ng3l @merlos1977 @matte_lodi @luc4m @Manu_De_Lucia @Gabry89 @vxsh4d0w @VirITeXplorer @rootella_ #infosecurity

reecdeep's tweet photo. #malspam #pony #fareit #Malware targets #Italy 🇮🇹 #opendir

CARRARA S.p.A. - NS. OFFERTA

analysis: https://t.co/vB1HxadaTr
c2: kboyud[.com

@csirt_it @guelfoweb @Bl4ng3l @merlos1977 @matte_lodi @luc4m @Manu_De_Lucia @Gabry89 @vxsh4d0w @VirITeXplorer @rootella_

#infosecurity https://t.co/qBIlW9ymGy

0

19

3

0

The Missing LNK

@BitDefense

over 6 years ago

#Malspam with fake Google Doc links: hxxp://afya.geefto.com/cursiveness/tomgosse.php hxxp://iienagpur.in/add-review/wsr3214.php -> ZIP -> XLSM -> hxxp://cashforfurcoat.com/1.dll More traffic in AnyRun report. Being tagged as #Hancitor #Pony #Fareit https://t.co/1pYyKt1vmD

1

16

5

2

0

Hatching @hatching_io

over 6 years ago

The Easter bunny didn't bring us much chocolate, but we did get a bunch of malware. That counts? Here are a few recent analyses: #Pony/#Fareit infostealer https://t.co/8HQABYWd39 #Remcos RAT https://t.co/VYfh0n52wt Extracted XLM/Excel 4.0 Macro https://t.co/B9E1YRRSoe

hatching_io's tweet photo. The Easter bunny didn't bring us much chocolate, but we did get a bunch of malware. That counts? Here are a few recent analyses:

#Pony/#Fareit infostealer
https://t.co/8HQABYWd39

#Remcos RAT
https://t.co/VYfh0n52wt

Extracted XLM/Excel 4.0 Macro
https://t.co/B9E1YRRSoe https://t.co/9caZ6Z2leR

0

10

3

1

0

BinSecSweeper @BinSecSweeper

over 6 years ago

#mirai #emotet #anubis #fareit and many more malware sounds familiar? Analyze them in detail with our File Threat Intelligence Platform. Please see https://t.co/L13XMWjfuY & [email protected] #DFIR #ThreatIntel #ThreatHunting #BigData #infosec #CyberSecurity #files

BinSecSweeper's tweet photo. #mirai #emotet #anubis #fareit and many more malware sounds familiar? Analyze them in detail with our File Threat Intelligence Platform. Please see https://t.co/L13XMWjfuY & info@vulnex.com #DFIR #ThreatIntel #ThreatHunting #BigData #infosec #CyberSecurity #files https://t.co/65rGv10XJJ

0

5

0

Artsiom Holub @Mesiagh

almost 7 years ago

@JayTHL @James_inthe_box @cocaman a.exe C2: 31.44.184.33 vi01cc.exe is #Vidar C2: artemiscynthia[.]org vicc.exe is #Vidar C2: earphorialofts[.]net p2cc.exe is #FareIT C2: colibrindit[.]com p111s2.exe and p111.exe are #Pony POST to colibrindit[.]com/mlu/forum.php

0

4

3

0

JAMESWT @JAMESWT_WT

almost 7 years ago

@dvk01uk Ok we have a response, as point out by @JayTHL this samples is #fareit #pony anyway is too #autoit 😜😝

0

1

0

reecDeep @reecdeep

about 7 years ago

🐴 #Fareit #pony #malware from #malspam as fake 'TNT Parcel Notification' #threatintel #threathunting #infosec #CyberSecurity #DFIR c2: hxxp://chirayugroup.in/web11/host/server/gate.php https://t.co/T7XQLK0DDw @JAMESWT_MHT @malwrhunterteam @matte_lodi @merlos1977 @58_158_177_102

reecdeep's tweet photo. 🐴 #Fareit #pony #malware from #malspam as fake 'TNT Parcel Notification'
#threatintel #threathunting #infosec #CyberSecurity #DFIR
c2: hxxp://chirayugroup.in/web11/host/server/gate.php
https://t.co/T7XQLK0DDw
@JAMESWT_MHT @malwrhunterteam @matte_lodi
@merlos1977 @58_158_177_102 https://t.co/9JVajeNh1Q

1

7

3

0

Tino aka Paladin316

@Paladin3161

about 7 years ago

#Fareit Malware Famaily: Fareit https://t.co/OwSbr07sf2 MD5s: 2edccf67d1989056fcbfa9ce849da101 600290989d7810da164abc50b9996801 649235066887f12b1074b4ddcd305c91 IPs: 192.185.117.]233 192.185.117.]254 URLs & Domains:See report https://t.co/y3CR09XBfS #malware #OSINT #IOC

0

3

1

0

TruSTAR @trustartech

about 7 years ago

OSINT Threat Report (ft. insights from @briankrebs): Top Three Malware NJRat, Pony, Gandcrab - Week of July 31 https://t.co/OrT2GAP1UR by @SohnVonErde #OSINT #NJRAT #Pony #Fareit #GandCrab #Trickbot

0

2

3

1

0

moto_sato

@58_158_177_102

about 7 years ago

日本語マルウェアメールが接到しています　#malspam #fareit Subject : あなたのSF Expressの配送先住所を早急に確認してください Attached Filename : 元の出荷伝票.PDF.gz File Name : ______.PDF.exe Hash : b920d06024a2f5df81380bf000121a59

58_158_177_102's tweet photo. 日本語マルウェアメールが接到しています　#malspam #fareit

Subject : あなたのSF Expressの配送先住所を早急に確認してください
Attached Filename : 元の出荷伝票.PDF.gz
File Name : ______.PDF.exe
Hash : b920d06024a2f5df81380bf000121a59 https://t.co/o7d6r4eoSS

1

15

11

0

D3Lab @D3LabIT

about 7 years ago

Nuova Campagna Italiana di #MalSpam diffonde il malware #Fareit, per valorizzare la comunicazione viene citata la Banca di Italia! #VirusTotal report: https://t.co/22cqZKofDi #malware /cc @bancaditalia

D3LabIT's tweet photo. Nuova Campagna Italiana di #MalSpam diffonde il malware #Fareit, per valorizzare la comunicazione viene citata la Banca di Italia!

#VirusTotal report: https://t.co/22cqZKofDi

#malware /cc @bancaditalia https://t.co/NmZBNfY6QI

1

9

10

0

Jammy @jcarndt

about 7 years ago

Goooooooooooooooood morning, #pony/#fareit! Executable was an attached .gz file in a phishing email. URL seems to be dead now. hxxp://thc.com.tr/wp/panelnew/gate.php https://t.co/JT5bDtbceg

0

2

1

0

Tino aka Paladin316

@Paladin3161

about 7 years ago

New Malware IOCs report from today posted 2019-06-27_13_38 UTC https://t.co/MMXBd7yHDm #malware #OSINT #IOC #Azorult #Casur #Dyzu #Dzfn #Fareit #Hawkeye #Icedid #Ispy #Meretam #Ursu #Vidar #Wacatac #Zpevdo

0

2

1

0

Herbie Zimmerman @HerbieZimmerman

about 7 years ago

20019-06-06: Some #fareit/#pony malspam From: REMI ELEKTROTECHNIK LIMITED <[email protected]> Sub: Re:Re: invoice PI_9_0147 MD5 (.ace) = 4f905d75990e174e2175ab3ef2142df6 MD5 (iso.exe) = 54af757e37d08e135f4aa24b684f68ce https://t.co/7FnZverWSL https://t.co/wDFQ9miXwV

HerbieZimmerman's tweet photo. 20019-06-06: Some #fareit/#pony malspam
From: REMI ELEKTROTECHNIK LIMITED <ssbhambhani@adordigatron.com>
Sub: Re:Re: invoice PI_9_0147
MD5 (.ace) = 4f905d75990e174e2175ab3ef2142df6
MD5 (iso.exe) = 54af757e37d08e135f4aa24b684f68ce
https://t.co/7FnZverWSL
https://t.co/wDFQ9miXwV https://t.co/6yKBBQiehq

1

9

4

0

J.A.R.V.I.S @peppermalware

about 7 years ago

#pony #fareit https://t.co/LvfoFpp1gr With refs to #cobaltstrike #loader hxxp://theeditedword.com/wp-includes/art.exe hxxp://cid.ag/wp-admin/art.exe hxxp://kingusaref.com/mlu/forum.php https://t.co/d8ZgKFCoKR IoCs: https://t.co/lMdx8dBKra #malware

1

11

3

0

Top Tweets for #Fareit

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users