#JssLoader - Twitter Hashtag

over 3 years ago

#Fin7 updated #JssLoader #Apt C&C: marioterno[.]com https://t.co/c1on8SNdBv bamadora[.]com https://t.co/me5YU2EOn7 #CyberAttack #cyberintelligence #infosec

ThreatBookLabs's tweet photo. #Fin7 updated #JssLoader #Apt
C&C: marioterno[.]com https://t.co/c1on8SNdBv
bamadora[.]com
https://t.co/me5YU2EOn7
#CyberAttack #cyberintelligence #infosec https://t.co/sSP6xxOzwF

0

62

20

11

0

Kelsey @k3dg3

over 3 years ago

Love this actor. #TA543 sagrid rolling in with a few changes! #JSSLoader typically. https://t.co/RVqcSslZ6c https://t.co/CyZq6pQjKp

1

7

3

0

Md Tauheed Alam @twitmetauheed

almost 4 years ago

https://t.co/qZxSx54gxT #Pentesting #jssloader #Cybersecurity #infosec #shellcode Whitepaper here⬇️ https://t.co/kMChSyv5hP

0

2

0

hasherezade

@hasherezade

almost 4 years ago

My new paper for @MBThreatIntel: "#JSSLoader - the #shellcode edition" : https://t.co/gzpnhlr6mf // #FIN7

15

455

170

78

0

Josh Trombley @jtrombley90

almost 4 years ago

New #JSSLoader campaign today. Starts with an email from @EdibleArrangeSJ with a link that redirects you to ahlimedia-my.sharepoint[.]com & drops an xll that downloads JSSLoader from essentialsmassageanddayspa[.]com. That same domain is C2 to start and switches to bamadora[.]com

2

15

4

1

0

Rony @r0ny_123

about 4 years ago

Pushed couple of #BIRDWATCH/#CROWVIEW (~#JssLoader) Infrastructure related to @k3dg3's tweet, into ThreatFox. https://t.co/ugIlSIAnmj cc @bryceabdo

Kelsey @k3dg3

about 4 years ago

Good end to the day. #TA543 dropping what looks like #JSSLoader https://t.co/XSfuE2juAJ https://t.co/NdFJvHg6Ax

1

46

14

3

0

6

0

Kelsey @k3dg3

about 4 years ago

Good end to the day. #TA543 dropping what looks like #JSSLoader https://t.co/XSfuE2juAJ https://t.co/NdFJvHg6Ax

1

46

14

3

0

Bryce @bryceabdo

over 4 years ago

#BIRDWATCH, often referred to collectively as #JssLoader, used by #UNC3381 with some overlaps to FIN7. What a fun code family to dive into. A variant named CROWVIEW used by FIN7.

1

4

0

Bryce @bryceabdo

over 4 years ago

🚨📝 New #FIN7 threat research blog, "Power Hour", published today by @Mandiant. Please enjoy 🌶🌶 https://t.co/HZlyGg2q3M Blog includes: - FIN7 archaeology & evolution ⛏ - #POWERPLANT deep dive - BIRDWATCH (~#JssLoader) - Supply chain (😱) neat stuff in thread 🧵⤵️

4

117

60

18

0

Hido Cohen @0xhido

over 4 years ago

⚠️Threat Alert Obfuscated #JSSLoader delivered by #XLL files. To read more about the infection chain: https://t.co/b7QAeXoq04 VT Collection: https://t.co/QakHksj7LS

0xhido's tweet photo. ⚠️Threat Alert
Obfuscated #JSSLoader delivered by #XLL files.

To read more about the infection chain: https://t.co/b7QAeXoq04

VT Collection: https://t.co/QakHksj7LS https://t.co/YGb7sK3iGS

2

76

42

11

0

Morphisec

@morphisec

over 4 years ago

[New Threat Post] New #JSSLoader Trojan Delivered Through XLL Files https://t.co/cTotPI4b28 #infosec #malware

0

18

12

2

0

Threat Intelligence @threatintel

over 4 years ago

#ThreatProtection #JSSLoader #malware spread with help of malicious #Excel add-ins, read more: https://t.co/GFxHTPQeBb

0

2

4

0

Secureworks @Secureworks

over 4 years ago

SCWX CTU researchers observed multiple malicious Excel add-ins delivering #JSSLoader #malware associated with the GOLD NIAGARA threat group. Read the report here: https://t.co/GcnrSlkbWL | #Cybersecurity

Secureworks's tweet photo. SCWX CTU researchers observed multiple malicious Excel add-ins delivering #JSSLoader #malware associated with the GOLD NIAGARA threat group. Read the report here: https://t.co/GcnrSlkbWL | #Cybersecurity https://t.co/3rBLrJ4LXj

0

2

1

0

James @James_inthe_box

over 4 years ago

Looks like a new #jssloader https://t.co/r9knk93xRk

3

44

10

2

0

Kelsey @k3dg3

over 4 years ago

Seeing these XLLs everywhere these days. Email (invoice theme) -> URL -> XLL -> payload (exe) #JSSLoader #TA543

2

16

1

0

Bryce @bryceabdo

over 4 years ago

@ChicagoCyber Love it, and clarifying on my EMOJINT, the answer here is BIRDWATCH (#JssLoader)

0

4

0

Threatpost

@threatpost

about 5 years ago

#FIN7’s gambit compromised at least one law firm, giving them a shot of the #JSSLoader remote-access trojan (#RAT), said researchers at @eSentire’s Threat Response Unit (#TRU), #cybersecurity https://t.co/66VqTLN3N3

0

11

14

0

Threat Intelligence @threatintel

about 5 years ago

#ThreatProtection #JSSLoader #malware returns with a new variant, read more: https://t.co/5AoDOrd2vM

0

1

0

Cyber_OSINT @Cyber_O51NT

about 5 years ago

Current #TA543 campaigns delivering #JSSLoader are using similar lures to those observed by Proofpoint researchers in 2019 and the emails continue to contain links to a TDS landing page https://t.co/mTitvYx9Is

0

19

7

5

0

Shadow Chaser Group @ShadowChasing1

about 5 years ago

#FIN7 #Jssloader implant ITW:1ac719c744d22f42e4978e7b55828435 filename:Current-Status-062021-81197.xlsb ITW:526d56017ef5105277fe0d366c95c39d filename:logo.png C2:injuryless[.]com

InQuest @InQuest

about 5 years ago

Here is a #maldoc with a novel @USPS themed coercive lure dropping #Putty from a 2-day old Russian domain... InQuest Labs: https://t.co/BcY3IK9RMv IOCs: hxxps://pigeonious.com/img/logo.]png #threatintelligence

2

17

4

0

2

22

10

1

0

Top Tweets for #JssLoader

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users