#Isfb - Twitter Hashtag

7 months ago

💡 Big news for student founders in India! ISFB launches a ₹25 Cr fund to back promising student-led startups, boosting early innovation with capital, mentorship & strong networks. @imarticus Read more 👇 🔗 https://t.co/jPUUDcSBWI #StudentFounders #StartupFunding #ISFB

startupstorym's tweet photo. 💡 Big news for student founders in India!
ISFB launches a ₹25 Cr fund to back promising student-led startups, boosting early innovation with capital, mentorship & strong networks. @imarticus

Read more 👇
🔗 https://t.co/jPUUDcSBWI

#StudentFounders #StartupFunding #ISFB https://t.co/pCRDLjnk2C

0

2

0

64

♪(๑ᴖ◡ᴖ๑)♪ LIVE TWEETING WC ⚽️🇲🇽 @manzanei

9 months ago

can i get 3k followers #isfb

2

11

0

7K

Cryptolaemus @Cryptolaemus1

about 2 years ago

#ISFB #LDR4 - url > .zip > .js > CobaltStrike Interesting campaign this week purporting to be Hays Recruitment. DocuSign lure that leads to a site that drops a zip file that contains a .js loader for #CobaltStrike (1/3)👇IOC's continued

Cryptolaemus1's tweet photo. #ISFB #LDR4 - url > .zip > .js > CobaltStrike

Interesting campaign this week purporting to be Hays Recruitment.

DocuSign lure that leads to a site that drops a zip file that contains a .js loader for #CobaltStrike

(1/3)👇IOC's continued https://t.co/oy30RmZ3OM

1

71

32

22

12K

BlueEye @BlueEye46572843

over 2 years ago

AS promised , i am done with writing my blog post about #GOZI aka #ISFB, where i went in the depth of analyzing the first loader,uncovering the config decryption routine ,showcasing #malware self-injection ,and the extraction of the 2nd stage. https://t.co/QM1R9WCpK6

4

46

13

16

8K

Ole Villadsen @OleVilladsen

over 2 years ago

Awesome work from @gh0stp0p on #Wailingcrab aka #Wikiloader - a sophisticated malware delivered by #TA544 / #Hive0133 often leading to #Gozi #Ursnif #ISFB - and how it misuses the #IoT #MQTT protocol for C2 communications. https://t.co/jsXvl44WRT

0

31

15

4

4K

JAMESWT @JAMESWT_WT

over 2 years ago

#ursnif #gozi #isfb update/tagged Tag for samples named #putty from communicalink].com 💥https://t.co/7Y0T6EEJo9 Tag post #killchain or/and related #Rozena #VNC #BadInteropt #Grabber #Plugin ⚠️https://t.co/7di70A4Q6o 💯Summary #agenziaentrate https://t.co/kADezqnWmA

JAMESWT_WT's tweet photo. #ursnif #gozi #isfb update/tagged

Tag for samples named #putty from communicalink].com
💥https://t.co/7Y0T6EEJo9

Tag post #killchain or/and related
#Rozena #VNC #BadInteropt #Grabber #Plugin
⚠️https://t.co/7di70A4Q6o

💯Summary #agenziaentrate
https://t.co/kADezqnWmA https://t.co/znppDxeCnu

JAMESWT @JAMESWT_WT

over 2 years ago

"Commissione di osservanza sul registro tributario" #agenziaentrate #ursnif Email>Url>Zip>url>url>zip>hta>url>exe Samples https://t.co/kADezqnWmA C2 mifrutty.]com systemcheck].top Exe communicalink.]com/putty.exe this time is ursnif named as putty Run https://t.co/Tfv6ErrFty

JAMESWT_WT's tweet photo. "Commissione di osservanza sul registro tributario"
#agenziaentrate #ursnif
Email>Url>Zip>url>url>zip>hta>url>exe
Samples
https://t.co/kADezqnWmA
C2
mifrutty.]com
systemcheck].top

Exe
communicalink.]com/putty.exe
this time is ursnif named as putty

Run
https://t.co/Tfv6ErrFty https://t.co/Hq6x2xXlBF

1

32

3

2

11K

1

25

8

0

6K

JAMESWT @JAMESWT_WT

almost 3 years ago

"Commissione di vigilanza sul registro tributario" #Agenzia_Entrate #ursnif #gozi #isfb EML>zip pw>url>SMB EXE Samples 🌟https://t.co/kADezqnWmA CC @58_158_177_102 @felixw3000 @fumik0_ @bry_campbell @cocaman

JAMESWT_WT's tweet photo. "Commissione di vigilanza sul registro tributario"
#Agenzia_Entrate #ursnif #gozi #isfb
EML>zip pw>url>SMB EXE
Samples
🌟https://t.co/kADezqnWmA

CC @58_158_177_102 @felixw3000 @fumik0_ @bry_campbell @cocaman https://t.co/kM4DWDc8VZ

JAMESWT @JAMESWT_WT

almost 3 years ago

#UPDATE "Commissione di osservanza sull'anagrafe tributaria" spam email #Agenzia_Entrate #ursnif #gozi #isfb YET #SMB spread VBS and PAYLOAD \\ 62.173.145.210 62.173.145.164 62.173.146.12 \Scarica\Agenzia .zip Vbs \Scarica\Cliente. zip Exe Samples https://t.co/kADezqnWmA

$JAMESWT_WT's tweet photo. #UPDATE "Commissione di osservanza sull'anagrafe tributaria" spam email #Agenzia_Entrate #ursnif #gozi #isfb YET #SMB spread VBS and PAYLOAD \\ 62.173.145.210 62.173.145.164 62.173.146.12 \Scarica\Agenzia .zip Vbs \Scarica\Cliente. zip Exe Samples https://t.co/kADezqnWmA https://t.co/hKD5zOBTA0$

1

6

4

0

10K

1

27

10

3

12K

JAMESWT @JAMESWT_WT

almost 3 years ago

"Commissione di osservanza sull'anagrafe tributaria" spam email #Agenzia_Entrate #ursnif #gozi #isfb 🌟Here the email attached zip without password https://t.co/p7vBO3fOdV 🌟url that drop payload directly from SMB https://t.co/fLHaTMhThI cc @bry_campbell @cocaman @felixw3000

JAMESWT_WT's tweet photo. "Commissione di osservanza sull'anagrafe tributaria" spam email #Agenzia_Entrate #ursnif #gozi #isfb

🌟Here the email attached zip without password
https://t.co/p7vBO3fOdV

🌟url that drop payload directly from SMB
https://t.co/fLHaTMhThI

cc @bry_campbell @cocaman @felixw3000 https://t.co/LDxxuWAad9

0

3

1

0

647

JAMESWT @JAMESWT_WT

almost 3 years ago

#UPDATE "Commissione di osservanza sull'anagrafe tributaria" spam email #Agenzia_Entrate #ursnif #gozi #isfb YET #SMB spread VBS and PAYLOAD \\ 62.173.145.210 62.173.145.164 62.173.146.12 \Scarica\Agenzia .zip Vbs \Scarica\Cliente. zip Exe Samples https://t.co/kADezqnWmA

$JAMESWT_WT's tweet photo. #UPDATE "Commissione di osservanza sull'anagrafe tributaria" spam email #Agenzia_Entrate #ursnif #gozi #isfb YET #SMB spread VBS and PAYLOAD \\ 62.173.145.210 62.173.145.164 62.173.146.12 \Scarica\Agenzia .zip Vbs \Scarica\Cliente. zip Exe Samples https://t.co/kADezqnWmA https://t.co/hKD5zOBTA0$

1

6

4

0

10K

CASSIS Bonn @CASSIS_Bonn

almost 3 years ago

🌍| Excited for the #ISFB 23, where experts from the global security community meet for insightful discussions on pressing international issues. Already, you can watch some of last years' intriguing conversations on our YouTube channel! 👉https://t.co/vGIpPUViEi

CASSIS_Bonn's tweet photo. 🌍| Excited for the #ISFB 23, where experts from the global security community meet for insightful discussions on pressing international issues. Already, you can watch some of last years' intriguing conversations on our YouTube channel!

👉https://t.co/vGIpPUViEi https://t.co/GRyOdKNsVz

0

3

1

0

217

CASSIS Bonn @CASSIS_Bonn

almost 3 years ago

🌍| #ISFB 23 We are excited for this year’s International Security Forum in Bonn, which will take place from Oct. 19 until Oct. 22, 2023. Now, you can find information on our four day program on our website! 👉https://t.co/eU9FmuAjXz

CASSIS_Bonn's tweet photo. 🌍| #ISFB 23
We are excited for this year’s International Security Forum in Bonn, which will take place from Oct. 19 until Oct. 22, 2023. Now, you can find information on our four day program on our website!

👉https://t.co/eU9FmuAjXz https://t.co/3cKuymFPGO

0

4

3

1

430

Jean-Lou Justine

@Plathelminthe4

almost 3 years ago · Guarulhos

Now at Sao Paulo airport, waiting to go to International Symposium on Flatworm Biology #ISFB

0

10

0

475

Unit 42 @Unit42_Intel

almost 3 years ago

2023-07-12 (Wednesday) - #Gozi/#ISFB infection in an AD environment led to #CobaltStrike C2: 170.130.55[.]162:443 - iamupdate[.]com. List of IOCs at https://t.co/PWtMgpJeqi

Unit42_Intel's tweet photo. 2023-07-12 (Wednesday) - #Gozi/#ISFB infection in an AD environment led to #CobaltStrike C2: 170.130.55[.]162:443 - iamupdate[.]com. List of IOCs at https://t.co/PWtMgpJeqi https://t.co/Wws7FUudy5

1

96

35

6

17K

reecDeep @reecdeep

almost 3 years ago

Updated #GOZI #Ursnif #ISFB campaign 🔥new c2: https://avas1t,de/in/loginq/ 109.105,198.129 delideta,com #infosec #CyberSecurity https://t.co/E6EEzVW8FJ

reecdeep's tweet photo. Updated #GOZI #Ursnif #ISFB campaign

🔥new c2:
https://avas1t,de/in/loginq/
109.105,198.129
delideta,com

#infosec #CyberSecurity

https://t.co/E6EEzVW8FJ https://t.co/sMiiDLhav7

JAMESWT @JAMESWT_WT

almost 3 years ago

"BRT S.P.A. - Codice cliente 0XXXX (IDXXXX) spam email spread #ursnif #gozi #italy EML>Pdf>url>zip>js>url>dll Samples https://t.co/vfOQWIdOwC Domain s:/exeseria[.]com/ C2 s:/avas1ta.[com/in/login/ itwicenice[.com s://avas1t.[de/in/loginq/ cc @58_158_177_102 @felixw3000 @fumik0_

JAMESWT_WT's tweet photo. "BRT S.P.A. - Codice cliente 0XXXX (IDXXXX)
spam email spread #ursnif #gozi #italy
EML>Pdf>url>zip>js>url>dll
Samples
https://t.co/vfOQWIdOwC
Domain
s:/exeseria[.]com/
C2
s:/avas1ta.[com/in/login/
itwicenice[.com
s://avas1t.[de/in/loginq/
cc @58_158_177_102 @felixw3000 @fumik0_ https://t.co/ODYZDJQDmB

2

52

22

4

50K

0

23

5

2

4K

reecDeep @reecdeep

about 3 years ago

#Gozi #Ursnif #malware #ISFB targeting #italy🇮🇹 thanks to @JAMESWT_MHT 🔥staging:hxxp://swebbers.com 🔥c2: hxxp://mainertin.com 🔥Plugins: hxxp://94.140.114.123/sk32.jpg,sk64jpg hxxp://94.140.114.123/c32.jpg,c64.jpg #infosec #cybercrime #cybersecurity

reecdeep's tweet photo. #Gozi #Ursnif #malware #ISFB targeting #italy🇮🇹

thanks to @JAMESWT_MHT

🔥staging:hxxp://swebbers.com
🔥c2: hxxp://mainertin.com

🔥Plugins:
hxxp://94.140.114.123/sk32.jpg,sk64jpg
hxxp://94.140.114.123/c32.jpg,c64.jpg

#infosec #cybercrime #cybersecurity https://t.co/JTARYc0pBs

0

24

6

1

3K

reecDeep @reecdeep

about 3 years ago

#Malware #Gozi #Ursnif #ISFB targeting #italy🇮🇹 thanks to @JAMESWT_MHT dll: https://t.co/yXfhuysGDa 🔥staging: 91.215[.85.222 🔥c2: fastyray[.com debosod[.com https://t.co/U4gXq5M47b #infosec #cybersecurity

reecdeep's tweet photo. #Malware #Gozi #Ursnif #ISFB targeting #italy🇮🇹
thanks to @JAMESWT_MHT

dll: https://t.co/yXfhuysGDa

🔥staging: 91.215[.85.222

🔥c2:
fastyray[.com
debosod[.com

https://t.co/U4gXq5M47b

#infosec #cybersecurity https://t.co/jPexSBGbNn

JAMESWT @JAMESWT_WT

about 3 years ago

"Secondo Sollecito di Pagamento del 27/04/2023: IT-xx" #DHL spam email spread #ursnif #Gozi Botnet 5050 Build 250257 Email>pdf>js>js>dll Run https://t.co/Tcl5BeNZk9 Samples backup https://t.co/JJCE1C4tZE C2 91.215.85.]222 Plugin (old samples) 94.140.115.]190/c64.jpg - sk64.jpg

JAMESWT_WT's tweet photo. "Secondo Sollecito di Pagamento del 27/04/2023: IT-xx"
#DHL spam email spread #ursnif #Gozi
Botnet 5050 Build 250257
Email>pdf>js>js>dll
Run
https://t.co/Tcl5BeNZk9
Samples backup
https://t.co/JJCE1C4tZE
C2
91.215.85.]222
Plugin (old samples)
94.140.115.]190/c64.jpg - sk64.jpg https://t.co/LbgbTH3a0r

4

27

14

1

16K

0

21

10

1

5K

JAMESWT @JAMESWT_WT

over 3 years ago

Just updated samples + hunting + run + added tags + Dll info from @reecdeep #Ursnif #Gozi #Isfb Samples 💠https://t.co/aiwpbXqho6 Urls 💠https://t.co/I2hdere2yz Info ⏯️https://t.co/mkqgQgfbbp📝 Run https://t.co/VyfgBUsQwl cc @58_158_177_102 @felixw3000 @fumik0_

JAMESWT_WT's tweet photo. Just updated samples + hunting + run + added tags
+ Dll info from @reecdeep
#Ursnif #Gozi #Isfb
Samples
💠https://t.co/aiwpbXqho6
Urls
💠https://t.co/I2hdere2yz

Info
⏯️https://t.co/mkqgQgfbbp📝

Run
https://t.co/VyfgBUsQwl

cc @58_158_177_102 @felixw3000 @fumik0_ https://t.co/qoMCuYmscH

reecDeep @reecdeep

over 3 years ago

#Malware #Italy 🇮🇹 thanks @pr0xylife @JAMESWT_MHT 👏 .one #maldoc downloads DLL and starts shellcode like previous #Ursnif campaigns: 1⃣ <decoy domain> 2⃣ www,sisopen,it/.... 3⃣ www,paolasavinodanza,it/... then tries to download from discordapp https://t.co/QHhSdzGnLg #infosec

reecdeep's tweet photo. #Malware #Italy 🇮🇹
thanks @pr0xylife @JAMESWT_MHT 👏
.one #maldoc downloads DLL and starts shellcode like previous #Ursnif campaigns:
1⃣ <decoy domain>
2⃣ www,sisopen,it/....
3⃣ www,paolasavinodanza,it/...
then tries to download from discordapp
https://t.co/QHhSdzGnLg
#infosec https://t.co/y5A1N2MAWR

2

31

10

4

10K

1

7

2

0

2K

reecDeep @reecdeep

over 3 years ago

#Gozi #malware #ursnif #ISFB targeting #Italy 🇮🇹 thanks @JAMESWT_MHT run:https://t.co/g5TpRe0mf7 🔥stage 91.215,85.186 🔥c2 91.215,85.186 oqdomain,com 🔥plugins 94.140,114.159/sk32.jpg 94.140,114.159/sk64.jpg 94.140,115.47/c32.jpg https://t.co/06gbhhTY5I #infosecurity #infosec

reecdeep's tweet photo. #Gozi #malware #ursnif #ISFB targeting #Italy 🇮🇹
thanks @JAMESWT_MHT
run:https://t.co/g5TpRe0mf7
🔥stage
91.215,85.186
🔥c2
91.215,85.186
oqdomain,com
🔥plugins
94.140,114.159/sk32.jpg
94.140,114.159/sk64.jpg
94.140,115.47/c32.jpg
https://t.co/06gbhhTY5I
#infosecurity #infosec https://t.co/N5SvAtkP63

JAMESWT @JAMESWT_WT

over 3 years ago

"Ricevuta di pagamento-Transazione n. " 29_03_2023 #agenziaentrate spread #ursnif #gozi Botnet 5050 Email > PDF >Url >Zip>JS>Url>Dll Samples https://t.co/kADezqnWmA Urls https://dobcia.]com/ora http://dobcia.]com/ C2 91.215.85.[186 @58_158_177_102 @felixw3000 @fumik0_

JAMESWT_WT's tweet photo. "Ricevuta di pagamento-Transazione n. " 29_03_2023
#agenziaentrate spread #ursnif #gozi Botnet 5050
Email > PDF >Url >Zip>JS>Url>Dll
Samples
https://t.co/kADezqnWmA
Urls
https://dobcia.]com/ora
http://dobcia.]com/
C2
91.215.85.[186
@58_158_177_102 @felixw3000 @fumik0_ https://t.co/FvkCeTwSvQ

4

34

18

0

10K

0

22

7

1

5K

JAMESWT @JAMESWT_WT

over 3 years ago

#Ursnif #Gozi #Isfb Botnet 7716 #smb with payload on "25/03/2023 8:20" 109.248.11[.225 "24/03 - 17:11" 46.8.210[.91 "24/03 - 17:11" https://t.co/gecY8A37Kc 109.248.11[.226-227 "24/03 - 13:50" https://t.co/FHnDtXrRpZ 46.8.19.]235 "06/03 15:21" https://t.co/WfD6mbeNVc

JAMESWT_WT's tweet photo. #Ursnif #Gozi #Isfb Botnet 7716
#smb with payload on "25/03/2023 8:20"

109.248.11[.225 "24/03 - 17:11"
46.8.210[.91 "24/03 - 17:11"
https://t.co/gecY8A37Kc
109.248.11[.226-227 "24/03 - 13:50"
https://t.co/FHnDtXrRpZ
46.8.19.]235 "06/03 15:21"
https://t.co/WfD6mbeNVc https://t.co/szHD43cBCq

JAMESWT @JAMESWT_WT

over 3 years ago

#Ursnif #Gozi #Isfb Botnet 7716 24_03_2023 🇮🇹 a tema #MISE/#MEF/#AGENZIAENTRATE via #SMB \Agenzia\Server.exe 46.8.19[.242 46.8.210[.86 Samples https://t.co/kADezqnWmA C2 193.233.175.]115 185.68.93].20 62.173.140].250 46.8.210.]133 @felixw3000 @58_158_177_102 @fumik0_

$JAMESWT_WT's tweet photo. #Ursnif #Gozi #Isfb Botnet 7716 24_03_2023 🇮🇹 a tema #MISE/#MEF/#AGENZIAENTRATE via #SMB \Agenzia\Server.exe 46.8.19[.242 46.8.210[.86 Samples https://t.co/kADezqnWmA C2 193.233.175.]115 185.68.93].20 62.173.140].250 46.8.210.]133 @felixw3000 @58_158_177_102 @fumik0_ https://t.co/e21ujJMcLS$

2

19

5

2

21K

0

19

2

0

4K

reecDeep @reecdeep

over 3 years ago

#Gozi #Malware #Ursnif #ISFB #Italy 🇮🇹 caught by @JAMESWT_MHT 🔥staging: 193.233,175.115 185.68,93.20 62.173,140.250 46.8,210.133 🔥c2: 45.89,189.6 45.140,167.95 31.41,44.117 62.173,141.28 46.8,19.44 195.123,211.112 #infosec #cybersecurity https://t.co/LzuRcQknO3

reecdeep's tweet photo. #Gozi #Malware #Ursnif #ISFB #Italy 🇮🇹
caught by @JAMESWT_MHT

🔥staging:
193.233,175.115
185.68,93.20
62.173,140.250
46.8,210.133

🔥c2:
45.89,189.6
45.140,167.95
31.41,44.117
62.173,141.28
46.8,19.44
195.123,211.112

#infosec #cybersecurity

https://t.co/LzuRcQknO3 https://t.co/3WEKPzEUQI

JAMESWT @JAMESWT_WT

over 3 years ago

#Ursnif #Gozi #Isfb Botnet 7716 24_03_2023 🇮🇹 a tema #MISE/#MEF/#AGENZIAENTRATE via #SMB \Agenzia\Server.exe 46.8.19[.242 46.8.210[.86 Samples https://t.co/kADezqnWmA C2 193.233.175.]115 185.68.93].20 62.173.140].250 46.8.210.]133 @felixw3000 @58_158_177_102 @fumik0_

$JAMESWT_WT's tweet photo. #Ursnif #Gozi #Isfb Botnet 7716 24_03_2023 🇮🇹 a tema #MISE/#MEF/#AGENZIAENTRATE via #SMB \Agenzia\Server.exe 46.8.19[.242 46.8.210[.86 Samples https://t.co/kADezqnWmA C2 193.233.175.]115 185.68.93].20 62.173.140].250 46.8.210.]133 @felixw3000 @58_158_177_102 @fumik0_ https://t.co/e21ujJMcLS$

2

19

5

2

21K

0

26

8

1

8K

Top Tweets for #Isfb

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users