Top Tweets for #JSSLoader
#Fin7 updated #JssLoader #Apt
C&C: marioterno[.]com https://t.co/c1on8SNdBv
bamadora[.]com
https://t.co/me5YU2EOn7
#CyberAttack #cyberintelligence #infosec
![ThreatBookLabs's tweet photo. #Fin7 updated #JssLoader #Apt
C&C: marioterno[.]com https://t.co/c1on8SNdBv
bamadora[.]com
https://t.co/me5YU2EOn7
#CyberAttack #cyberintelligence #infosec https://t.co/sSP6xxOzwF](https://pbs.twimg.com/media/FjRgpDWVsAIOexg.png)
![ThreatBookLabs's tweet photo. #Fin7 updated #JssLoader #Apt
C&C: marioterno[.]com https://t.co/c1on8SNdBv
bamadora[.]com
https://t.co/me5YU2EOn7
#CyberAttack #cyberintelligence #infosec https://t.co/sSP6xxOzwF](https://pbs.twimg.com/media/FjRgdgRUYAExRzq.png)
Love this actor. #TA543 sagrid rolling in with a few changes! #JSSLoader typically.
https://t.co/RVqcSslZ6c
https://t.co/CyZq6pQjKp
https://t.co/qZxSx54gxT
#Pentesting #jssloader #Cybersecurity
#infosec #shellcode
Whitepaper here⬇️ https://t.co/kMChSyv5hP
My new paper for @MBThreatIntel: "#JSSLoader - the #shellcode edition" : https://t.co/gzpnhlr6mf // #FIN7
New #JSSLoader campaign today. Starts with an email from @EdibleArrangeSJ with a link that redirects you to ahlimedia-my.sharepoint[.]com & drops an xll that downloads JSSLoader from essentialsmassageanddayspa[.]com. That same domain is C2 to start and switches to bamadora[.]com
Pushed couple of #BIRDWATCH/#CROWVIEW (~#JssLoader) Infrastructure related to @k3dg3's tweet, into ThreatFox.
https://t.co/ugIlSIAnmj
cc @bryceabdo
Good end to the day. #TA543 dropping what looks like #JSSLoader
https://t.co/XSfuE2juAJ
https://t.co/NdFJvHg6Ax
Good end to the day. #TA543 dropping what looks like #JSSLoader
https://t.co/XSfuE2juAJ
https://t.co/NdFJvHg6Ax
#BIRDWATCH, often referred to collectively as #JssLoader, used by #UNC3381 with some overlaps to FIN7. What a fun code family to dive into. A variant named CROWVIEW used by FIN7.
🚨📝 New #FIN7 threat research blog, "Power Hour", published today by @Mandiant. Please enjoy 🌶🌶
https://t.co/HZlyGg2q3M
Blog includes:
- FIN7 archaeology & evolution ⛏
- #POWERPLANT deep dive
- BIRDWATCH (~#JssLoader)
- Supply chain (😱)
neat stuff in thread 🧵⤵️
⚠️Threat Alert
Obfuscated #JSSLoader delivered by #XLL files.
To read more about the infection chain: https://t.co/b7QAeXoq04
VT Collection: https://t.co/QakHksj7LS
[New Threat Post] New #JSSLoader Trojan Delivered Through XLL Files
https://t.co/cTotPI4b28 #infosec #malware
#ThreatProtection #JSSLoader #malware spread with help of malicious #Excel add-ins, read more: https://t.co/GFxHTPQeBb
SCWX CTU researchers observed multiple malicious Excel add-ins delivering #JSSLoader #malware associated with the GOLD NIAGARA threat group. Read the report here: https://t.co/GcnrSlkbWL | #Cybersecurity
Seeing these XLLs everywhere these days. Email (invoice theme) -> URL -> XLL -> payload (exe) #JSSLoader #TA543
#FIN7’s gambit compromised at least one law firm, giving them a shot of the #JSSLoader remote-access trojan (#RAT), said researchers at @eSentire’s Threat Response Unit (#TRU), #cybersecurity https://t.co/66VqTLN3N3
#ThreatProtection #JSSLoader #malware returns with a new variant, read more: https://t.co/5AoDOrd2vM
Current #TA543 campaigns delivering #JSSLoader are using similar lures to those observed by Proofpoint researchers in 2019 and the emails continue to contain links to a TDS landing page https://t.co/mTitvYx9Is
#FIN7 #Jssloader implant
ITW:1ac719c744d22f42e4978e7b55828435
filename:Current-Status-062021-81197.xlsb
ITW:526d56017ef5105277fe0d366c95c39d
filename:logo.png
C2:injuryless[.]com
![ShadowChasing1's tweet photo. #FIN7 #Jssloader implant
ITW:1ac719c744d22f42e4978e7b55828435
filename:Current-Status-062021-81197.xlsb
ITW:526d56017ef5105277fe0d366c95c39d
filename:logo.png
C2:injuryless[.]com https://t.co/t95McSqL26](https://pbs.twimg.com/media/E3j9VfLVkAIjeAU.jpg)
Here is a #maldoc with a novel @USPS themed coercive lure dropping #Putty from a 2-day old Russian domain...
InQuest Labs: https://t.co/BcY3IK9RMv
IOCs:
hxxps://pigeonious.com/img/logo.]png
#threatintelligence
![InQuest's tweet photo. Here is a #maldoc with a novel @USPS themed coercive lure dropping #Putty from a 2-day old Russian domain...
InQuest Labs: https://t.co/BcY3IK9RMv
IOCs:
hxxps://pigeonious.com/img/logo.]png
#threatintelligence https://t.co/2ZGwpjHKV0](https://pbs.twimg.com/media/E3iSt-NXMAQL2ni.jpg)
Last Seen Hashtags on Sotwe
長府松小田本町
nolimit()filter:native_video
Seen from United States
كسيً_يسعبل
Seen from Jordan
Gümbürgümbürgeliyor
Seen from United States
1942年9月22日生
Seen from Japan
SomeThingsAreSACRED
Seen from United States
cumbat
Seen from United States
bund
Seen from Kuwait
AI短剧
Seen from Vietnam
momson ()
Seen from Germany
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
241M followers
Barack Obama
@barackobama
119.2M followers
Cristiano Ronaldo
@cristiano
112.2M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.1M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.3M followers
KATY PERRY
@katyperry
88.5M followers
Taylor Swift
@taylorswift13
82.4M followers
Lady Gaga
@ladygaga
73.9M followers
Virat Kohli
@imvkohli
71.3M followers
Kim Kardashian
@kimkardashian
70.2M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.4M followers
Neymar Jr
@neymarjr
64.1M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.8M followers
Selena Gomez
@selenagomez
61.6M followers
X
@x
60.8M followers