Top Tweets for #HypeAgent

16 days ago

Yet another one #HypeAgent courtesy of https://t.co/2QnuJOEykx via @modat_magnify team. Data should be in the feeds soon.

abuse.ch

@abuse_ch

17 days ago

We identified a new malware called #HypeAgent which acts as information stealer & loader. It is dominantly spread through malspam 📧, first observed on August 1, 2026 🔭👀 Key Capabilities ⤵️ 🕵️ Stealer & Loader: Supports 200+ commands; drops/executes payloads, including crypto miners 💸 🔎 Targeted Harvesting: Steals web browser & email credentials, crypto wallets, and gaming accounts (Steam, Roblox) 🎮 🤖 AI & Platform Cookie Stealing: Targets a list of hardcoded domains like Grok, Anthropic, Coinbase, ByBit, Instagram, and Rockstar Games for which it steals session cookies 🍪 💰 Electron App Webinjects: Intercepts activity on desktop apps like Exodus Wallet 👛 Artifacts observed ⤵️ 1️⃣ Stores stealers logs under C:\Users\USERNAME\AppData\Local\Temp\hype-YYYY-MM-DD.log 2️⃣ Uses HTTP host header "X-Hype-Agent-Token" during botnet C2 communication HypeAgent communicates via WebSocket using JSON. Here are some Botnet C2 servers we have been observed ⤵️ 📡 31.40.204.178:7080 WhiteLabel 🇹🇷 📡 94.26.3.211:7443 Stellar Group SAS 🇫🇷 📡 192.109.139.91:7443 Stellar Group SAS 🇺🇸 📡 195.177.94.60:7443 Stellar Group SAS 🇫🇷 📡 107.175.148.122:7443 HostPapa 🇺🇸 📡 209.54.103.173:7443 HostPapa 🇺🇸 📡 132.243.225.173:7080 QWINS-Hosting 🇩🇪 📡 78.40.209.113:7081 QWINS-Hosting 🇫🇮 📡 31.77.138.55:5654 QWINS-Hosting 🇫🇮 🦊 Releated IOCs on ThreatFox: https://t.co/X0S6ihaSXz 📄 Releated malware samples on MalwareBazaar: https://t.co/bdXcPm9i6e

$abuse_ch's tweet photo. We identified a new malware called #HypeAgent which acts as information stealer & loader. It is dominantly spread through malspam 📧, first observed on August 1, 2026 🔭👀 Key Capabilities ⤵️ 🕵️ Stealer & Loader: Supports 200+ commands; drops/executes payloads, including crypto miners 💸 🔎 Targeted Harvesting: Steals web browser & email credentials, crypto wallets, and gaming accounts (Steam, Roblox) 🎮 🤖 AI & Platform Cookie Stealing: Targets a list of hardcoded domains like Grok, Anthropic, Coinbase, ByBit, Instagram, and Rockstar Games for which it steals session cookies 🍪 💰 Electron App Webinjects: Intercepts activity on desktop apps like Exodus Wallet 👛 Artifacts observed ⤵️ 1️⃣ Stores stealers logs under C:\Users\USERNAME\AppData\Local\Temp\hype-YYYY-MM-DD.log 2️⃣ Uses HTTP host header "X-Hype-Agent-Token" during botnet C2 communication HypeAgent communicates via WebSocket using JSON. Here are some Botnet C2 servers we have been observed ⤵️ 📡 31.40.204.178:7080 WhiteLabel 🇹🇷 📡 94.26.3.211:7443 Stellar Group SAS 🇫🇷 📡 192.109.139.91:7443 Stellar Group SAS 🇺🇸 📡 195.177.94.60:7443 Stellar Group SAS 🇫🇷 📡 107.175.148.122:7443 HostPapa 🇺🇸 📡 209.54.103.173:7443 HostPapa 🇺🇸 📡 132.243.225.173:7080 QWINS-Hosting 🇩🇪 📡 78.40.209.113:7081 QWINS-Hosting 🇫🇮 📡 31.77.138.55:5654 QWINS-Hosting 🇫🇮 🦊 Releated IOCs on ThreatFox: https://t.co/X0S6ihaSXz 📄 Releated malware samples on MalwareBazaar: https://t.co/bdXcPm9i6e$

895

abuse.ch

@abuse_ch

17 days ago

muhammed coruh @Mcoruh251

over 1 year ago

@canekmekci $hgpt #hgpt #HypeAgent 🔥🔥🔥🔥🔥

141

Top Tweets for #HypeAgent

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users