Top Tweets for #NetSupport
#netsupport
Samples Collection Updated
👇
https://t.co/hNlkat55M4
Client32.ini
63854f102887b53a10f4fdeb44d7ab15
5.252.177.201:443
Client32.ini
cecb6e6d005f42268346aad378ef9e4b 65.109.104.71:443
new NSM.LIC
e3ee93f6840cc71638474435ace79050
cc @500mk500
Notre article offert de la semaine s'intéresse à l'utilisation des outils d'administration à distance tels que #Anydesk ou bien #NetSupport par des acteurs malveillants.
Retrouvez-le sans plus tarder sur https://t.co/uJ3fb2zcRy.
#cybersécurité #RAT
#booking #clickfix #netsupport
👇
security-check-guest.]com/sign-in/zcgbs460?
👇
209.99.186.]243/sisirom
👇
msi> pw "fanbot" grace.7z >
👇Client32.ini
feersona.]net:443
bryonsad.]net:443
209.99.186.]75/fakeurl.htm
Samples
https://t.co/K7sUxkjL1H
AnyRun
https://t.co/AByKBxeVg8
![JAMESWT_WT's tweet photo. #booking #clickfix #netsupport
👇
security-check-guest.]com/sign-in/zcgbs460?
👇
209.99.186.]243/sisirom
👇
msi> pw "fanbot" grace.7z >
👇Client32.ini
feersona.]net:443
bryonsad.]net:443
209.99.186.]75/fakeurl.htm
Samples
https://t.co/K7sUxkjL1H
AnyRun
https://t.co/AByKBxeVg8 https://t.co/VFpGiSBlXj](https://pbs.twimg.com/media/HJTf7qrWwAMFnOG.png)
![JAMESWT_WT's tweet photo. #booking #clickfix #netsupport
👇
security-check-guest.]com/sign-in/zcgbs460?
👇
209.99.186.]243/sisirom
👇
msi> pw "fanbot" grace.7z >
👇Client32.ini
feersona.]net:443
bryonsad.]net:443
209.99.186.]75/fakeurl.htm
Samples
https://t.co/K7sUxkjL1H
AnyRun
https://t.co/AByKBxeVg8 https://t.co/VFpGiSBlXj](https://pbs.twimg.com/media/HJTfzNkXwAQrIH4.png)
![JAMESWT_WT's tweet photo. #booking #clickfix #netsupport
👇
security-check-guest.]com/sign-in/zcgbs460?
👇
209.99.186.]243/sisirom
👇
msi> pw "fanbot" grace.7z >
👇Client32.ini
feersona.]net:443
bryonsad.]net:443
209.99.186.]75/fakeurl.htm
Samples
https://t.co/K7sUxkjL1H
AnyRun
https://t.co/AByKBxeVg8 https://t.co/VFpGiSBlXj](https://pbs.twimg.com/media/HJTe14sXEAIxNWJ.jpg)
![JAMESWT_WT's tweet photo. #booking #clickfix #netsupport
👇
security-check-guest.]com/sign-in/zcgbs460?
👇
209.99.186.]243/sisirom
👇
msi> pw "fanbot" grace.7z >
👇Client32.ini
feersona.]net:443
bryonsad.]net:443
209.99.186.]75/fakeurl.htm
Samples
https://t.co/K7sUxkjL1H
AnyRun
https://t.co/AByKBxeVg8 https://t.co/VFpGiSBlXj](https://pbs.twimg.com/media/HJTe1XHWUAUrcZS.png)
Looks like #NetSupport RAT @abuse_ch
'install.ps1' seen from China and Hong Kong
https://t.co/SuiU0JdzAY
Source from: hxxp://89.124.94(.)238:8888/install.ps1?key=hpK9mqasd324asdf23Oasdfw
It's a wrap for the NetSupport team at the #SITS26 show in London! Check out what the team got up to this week! To learn more about our latest solution visit https://t.co/4f7sw1aFD3 #DreamTeam #RemoteAccess #NetSupport
It's a wrap for the NetSupport team at the #SITS26 show in London! Check out what the team got up to this week! To learn more about our #remotedesktop software visit https://t.co/XJWGp6PLzW #DreamTeam #RemoteAccess #NetSupport
#booking #clickfix #netsupport "Update"
👇
propertypanelreservations].com
👇
147.45.45.245/genius/
👇
Client32.ini
host-netsup.]com:443
baracudamin.]com:443
95.85.246.]222/fakeurl.htm
Samples
https://t.co/PvoLYIajYd
AnyRun
https://t.co/eQtl3yRT2N
@k3dg3 @500mk500 @skocherhan
![JAMESWT_WT's tweet photo. #booking #clickfix #netsupport "Update"
👇
propertypanelreservations].com
👇
147.45.45.245/genius/
👇
Client32.ini
host-netsup.]com:443
baracudamin.]com:443
95.85.246.]222/fakeurl.htm
Samples
https://t.co/PvoLYIajYd
AnyRun
https://t.co/eQtl3yRT2N
@k3dg3 @500mk500 @skocherhan https://t.co/gbiwEDbj8d](https://pbs.twimg.com/media/HIVquD9W0AAxjsN.png)
#booking #clickfix #netsupport
👇
review-your-property.]com
👇
147.45.45.]238/genius-user
installer.msi>extracted>AltPayload pw fantombot>Client32 ini
👇
img-pulse-cache.]com:443
booking-static-assets.]com:443
95.85.246.]53/fakeurl.htm
Samples
https://t.co/mDXplzCuE6
@k3dg3
![JAMESWT_WT's tweet photo. #booking #clickfix #netsupport
👇
review-your-property.]com
👇
147.45.45.]238/genius-user
installer.msi>extracted>AltPayload pw fantombot>Client32 ini
👇
img-pulse-cache.]com:443
booking-static-assets.]com:443
95.85.246.]53/fakeurl.htm
Samples
https://t.co/mDXplzCuE6
@k3dg3 https://t.co/KE8usekyXm](https://pbs.twimg.com/media/HIGbKy8XIAAOw18.png)
![JAMESWT_WT's tweet photo. #booking #clickfix #netsupport
👇
review-your-property.]com
👇
147.45.45.]238/genius-user
installer.msi>extracted>AltPayload pw fantombot>Client32 ini
👇
img-pulse-cache.]com:443
booking-static-assets.]com:443
95.85.246.]53/fakeurl.htm
Samples
https://t.co/mDXplzCuE6
@k3dg3 https://t.co/KE8usekyXm](https://pbs.twimg.com/media/HIGZnutWEAIVtZj.png)
![JAMESWT_WT's tweet photo. #booking #clickfix #netsupport
👇
review-your-property.]com
👇
147.45.45.]238/genius-user
installer.msi>extracted>AltPayload pw fantombot>Client32 ini
👇
img-pulse-cache.]com:443
booking-static-assets.]com:443
95.85.246.]53/fakeurl.htm
Samples
https://t.co/mDXplzCuE6
@k3dg3 https://t.co/KE8usekyXm](https://pbs.twimg.com/media/HIGZkv5W8AAY-C6.png)
Eeek it's finally time for #SITS26! 🎉 We cannot wait to welcome you to stand 651 to show you how our solutions can help simplify your IT. 😁 See you soon! 👋 #ITAM #RemoteSupport #SITS #ITSupport #Events #NetSupport
Eeek it's finally time for #SITS26! 🎉 We cannot wait to welcome you to stand 651 to show you how our solutions can help simplify your IT. 😁 See you soon! 👋 #ITAM #RemoteSupport #SITS #ITSupport #Events #NetSupport
#booking #netsupport #rat
captcha-extranet-manage.]com/start
👇
77.91.97.]125/BookingVerifedCasBot
👇
msi>extracted>AltPayload>pw fantombot>
Client32.ini
👇
uurdxji.]com:443
yuaushg.]com:443
91.92.34.]113/fakeurl.htm
Samples
https://t.co/ej5rsqYlXK
@k3dg3 @500mk500 @skocherhan
![JAMESWT_WT's tweet photo. #booking #netsupport #rat
captcha-extranet-manage.]com/start
👇
77.91.97.]125/BookingVerifedCasBot
👇
msi>extracted>AltPayload>pw fantombot>
Client32.ini
👇
uurdxji.]com:443
yuaushg.]com:443
91.92.34.]113/fakeurl.htm
Samples
https://t.co/ej5rsqYlXK
@k3dg3 @500mk500 @skocherhan https://t.co/scvTW2zLda](https://pbs.twimg.com/media/HILh5IaXwAAwbo_.png)
![JAMESWT_WT's tweet photo. #booking #netsupport #rat
captcha-extranet-manage.]com/start
👇
77.91.97.]125/BookingVerifedCasBot
👇
msi>extracted>AltPayload>pw fantombot>
Client32.ini
👇
uurdxji.]com:443
yuaushg.]com:443
91.92.34.]113/fakeurl.htm
Samples
https://t.co/ej5rsqYlXK
@k3dg3 @500mk500 @skocherhan https://t.co/scvTW2zLda](https://pbs.twimg.com/media/HILgFmDXMAAL40F.png)
![JAMESWT_WT's tweet photo. #booking #netsupport #rat
captcha-extranet-manage.]com/start
👇
77.91.97.]125/BookingVerifedCasBot
👇
msi>extracted>AltPayload>pw fantombot>
Client32.ini
👇
uurdxji.]com:443
yuaushg.]com:443
91.92.34.]113/fakeurl.htm
Samples
https://t.co/ej5rsqYlXK
@k3dg3 @500mk500 @skocherhan https://t.co/scvTW2zLda](https://pbs.twimg.com/media/HILgE5jXUAASxqi.png)
#booking #clickfix #netsupport
👇
review-your-property.]com
👇
147.45.45.]238/genius-user
installer.msi>extracted>AltPayload pw fantombot>Client32 ini
👇
img-pulse-cache.]com:443
booking-static-assets.]com:443
95.85.246.]53/fakeurl.htm
Samples
https://t.co/mDXplzCuE6
@k3dg3
@skocherhan @smica83 @500mk500 installer.msi > extracted > AltPayload
pw "fantombot" > Client32 ini
MD5
483d16bbbb25c1d0e2c05000ef8a72c3
#netsupport #rat
GatewayAddress=jpgomd.]com:443
SecondaryGateway=jpgrsv.]com:443
45.227.254.]10/fakeurl.htm
Samples
https://t.co/4iibLfEGnl
AnyRun
https://t.co/kbOff944ij
![JAMESWT_WT's tweet photo. @skocherhan @smica83 @500mk500 installer.msi > extracted > AltPayload
pw "fantombot" > Client32 ini
MD5
483d16bbbb25c1d0e2c05000ef8a72c3
#netsupport #rat
GatewayAddress=jpgomd.]com:443
SecondaryGateway=jpgrsv.]com:443
45.227.254.]10/fakeurl.htm
Samples
https://t.co/4iibLfEGnl
AnyRun
https://t.co/kbOff944ij https://t.co/ntOK4CpUUo](https://pbs.twimg.com/media/HIGTAQwWoAAYfzT.png)
![JAMESWT_WT's tweet photo. @skocherhan @smica83 @500mk500 installer.msi > extracted > AltPayload
pw "fantombot" > Client32 ini
MD5
483d16bbbb25c1d0e2c05000ef8a72c3
#netsupport #rat
GatewayAddress=jpgomd.]com:443
SecondaryGateway=jpgrsv.]com:443
45.227.254.]10/fakeurl.htm
Samples
https://t.co/4iibLfEGnl
AnyRun
https://t.co/kbOff944ij https://t.co/ntOK4CpUUo](https://pbs.twimg.com/media/HIGS-eDXEAAcuzr.png)
![JAMESWT_WT's tweet photo. @skocherhan @smica83 @500mk500 installer.msi > extracted > AltPayload
pw "fantombot" > Client32 ini
MD5
483d16bbbb25c1d0e2c05000ef8a72c3
#netsupport #rat
GatewayAddress=jpgomd.]com:443
SecondaryGateway=jpgrsv.]com:443
45.227.254.]10/fakeurl.htm
Samples
https://t.co/4iibLfEGnl
AnyRun
https://t.co/kbOff944ij https://t.co/ntOK4CpUUo](https://pbs.twimg.com/media/HIGSHwaXMAAYofb.png)
cb04f21f53d0cfbf576070268b8a8719
FUD 0/57
jpgomd[.]com
jpgrsv[.]com
45[.]227[.]254[.]10/fakeurl[.]htm
AS267784 Flyservers S.A. 🇵🇦
#NetSupport @smica83 @500mk500 @JAMESWT_WT
![skocherhan's tweet photo. cb04f21f53d0cfbf576070268b8a8719
FUD 0/57
jpgomd[.]com
jpgrsv[.]com
45[.]227[.]254[.]10/fakeurl[.]htm
AS267784 Flyservers S.A. 🇵🇦
#NetSupport @smica83 @500mk500 @JAMESWT_WT https://t.co/6EFAhCxvj5](https://pbs.twimg.com/media/HH5p0aKXkAEf6sU.jpg)
'installer.msi' seen from Canada @abuse_ch
https://t.co/w3kEBSE5kg
Source from (FUD):
hxxp://138.124.126(.)97/rabot
Contacted FUD URL's: hxxp://62.164.177(.)240:443/fakeurl.htm
hxxp://62.164.177(.)240/fakeurl.htm
🚨ALERT🚨
#Booking #ClickFix #NetSupport Manager RAT seen in Italy.
hxxps://admin-extranet[.]com/start/
👇
ClickFix
👇
hxxp://217.145.226[.]119/book/
👇
lkhpihf[.]com:443
lkboasprqw[.]com:443
@anyrun_app : https://t.co/rJZi7kf04C
![ShadowOpCode's tweet photo. 🚨ALERT🚨
#Booking #ClickFix #NetSupport Manager RAT seen in Italy.
hxxps://admin-extranet[.]com/start/
👇
ClickFix
👇
hxxp://217.145.226[.]119/book/
👇
lkhpihf[.]com:443
lkboasprqw[.]com:443
@anyrun_app : https://t.co/rJZi7kf04C https://t.co/jWunNZwqo8](https://pbs.twimg.com/media/HHpjzyzW0AQhj05.png)
![ShadowOpCode's tweet photo. 🚨ALERT🚨
#Booking #ClickFix #NetSupport Manager RAT seen in Italy.
hxxps://admin-extranet[.]com/start/
👇
ClickFix
👇
hxxp://217.145.226[.]119/book/
👇
lkhpihf[.]com:443
lkboasprqw[.]com:443
@anyrun_app : https://t.co/rJZi7kf04C https://t.co/jWunNZwqo8](https://pbs.twimg.com/media/HHpKgppWQAM-HgN.jpg)
What are your biggest IT headaches? Come and tell us all about them at SITS 2026 and we'll help your IT support be more reliable, secure and straightforward. #ITAM #RemoteSupport #SITS26 #ITSupport #Events #NetSupport
Low detected MSI with FUD source URL, FUD C2 IP and domain @abuse_ch
https://t.co/ziaj660Ikg
Source from: hxxp://193.233.198(.)176/verifedd
FUD Contacted Domain: lipontrent(.)com
FUD IP: 62.164.177(.)227
#Booking #ClickFix
📧"General Notification: (5392009143, Complaints Continue to Rise, May, 2026)"
📧info@muraptor[.]com
⛓️eml > url > msiexec.exe > #NetSupport
🚫lkhpihf[.]com:443
🚫lkboasprqw[.]com:443
@anyrun_app analysis: https://t.co/XKbmKK8NFz
@JAMESWT_WT
![ShadowOpCode's tweet photo. #Booking #ClickFix
📧"General Notification: (5392009143, Complaints Continue to Rise, May, 2026)"
📧info@muraptor[.]com
⛓️eml > url > msiexec.exe > #NetSupport
🚫lkhpihf[.]com:443
🚫lkboasprqw[.]com:443
@anyrun_app analysis: https://t.co/XKbmKK8NFz
@JAMESWT_WT https://t.co/VW0hBxXzJF](https://pbs.twimg.com/media/HHfCf2kXsAA_M7m.png)
![ShadowOpCode's tweet photo. #Booking #ClickFix
📧"General Notification: (5392009143, Complaints Continue to Rise, May, 2026)"
📧info@muraptor[.]com
⛓️eml > url > msiexec.exe > #NetSupport
🚫lkhpihf[.]com:443
🚫lkboasprqw[.]com:443
@anyrun_app analysis: https://t.co/XKbmKK8NFz
@JAMESWT_WT https://t.co/VW0hBxXzJF](https://pbs.twimg.com/media/HHfCY5DWwAAQYzx.png)
![ShadowOpCode's tweet photo. #Booking #ClickFix
📧"General Notification: (5392009143, Complaints Continue to Rise, May, 2026)"
📧info@muraptor[.]com
⛓️eml > url > msiexec.exe > #NetSupport
🚫lkhpihf[.]com:443
🚫lkboasprqw[.]com:443
@anyrun_app analysis: https://t.co/XKbmKK8NFz
@JAMESWT_WT https://t.co/VW0hBxXzJF](https://pbs.twimg.com/media/HHfCSFCXIAAQyi0.jpg)
SITS 2026 is almost here!
Are you attending Europe’s leading event for ITSM and IT support professionals? If so, make sure to visit NetSupport and 247connect at Stand 651!
Get the details here: https://t.co/sqjtWSj986
#SITS26 #ITSM #NetSupport #247connect #SITS2026
Fake “BackgroundFix” sites trick users into running commands that deploy CastleLoader malware, dropping NetSupport RAT and CastleStealer to steal browser, wallet, and Telegram data using advanced evasion techniques. #CastleLoader #NetSupport
https://t.co/pkd7GwABMi
Last Seen Hashtags on Sotwe
Most Popular Users
Elon Musk 
@elonmusk
240.1M followers
Barack Obama
@barackobama
119.3M followers
Donald J. Trump
@realdonaldtrump
111.6M followers
Cristiano Ronaldo
@cristiano
108.8M followers
Narendra Modi
@narendramodi
106.9M followers
Rihanna
@rihanna
97.2M followers
NASA
@nasa
92.1M followers
Justin Bieber
@justinbieber
90.5M followers
KATY PERRY
@katyperry
86.7M followers
Taylor Swift
@taylorswift13
80.5M followers
Lady Gaga
@ladygaga
72.1M followers
Kim Kardashian
@kimkardashian
69.3M followers
YouTube
@youtube
68.6M followers
Virat Kohli
@imvkohli
68.4M followers
Bill Gates
@billgates
63.4M followers
The Ellen Show
@theellenshow
62.5M followers
CNN
@cnn
61.9M followers
Neymar Jr
@neymarjr
60.9M followers
X
@x
60.9M followers
CNN Breaking News
@cnnbrk
59.9M followers