#NukeSped - Twitter Hashtag

2 months ago

BlueNoroff joins your Zoom call as an AI deepfake, then asks you to paste one fix into PowerShell. https://t.co/QWCxgDzDQE #ThreatIntel #NukeSped #CosmicDoor #SilentSiphon

threadlinqs's tweet photo. BlueNoroff joins your Zoom call as an AI deepfake, then asks you to paste one fix into PowerShell. https://t.co/QWCxgDzDQE #ThreatIntel #NukeSped #CosmicDoor #SilentSiphon https://t.co/Z1bHezayVA

0

3

1

2

295

lazarusholic @lazarusholic

2 months ago

"Inside a DPRK BlueNoroff ClickFix Kit" published by @JUMPSEC. #Phishing, #Bluenoroff, #NukeSped, #Cloudzy, #Telegram, #ClickFix https://t.co/eFbsKcGNnh

0

26

5

13

2K

JAMESWT @JAMESWT_WT

almost 2 years ago

@malwrhunterteam @1ZRR4H @ShadowChasing1 @h2jazi spy #NukeSped ❇️https://t.co/29Gw0jeqJK

0

3

1

0

595

JAMESWT @JAMESWT_WT

almost 2 years ago

@malwrhunterteam @ShadowChasing1 @h2jazi #NukeSped https://t.co/g5hWGUOu7z

0

4

0

487

Intel-Ops @Intel_Ops_io

over 2 years ago

The patch masqueraded as a legitimate file and had functions to upload and download files, execute code, and to collect system information. The file was called: “EncryptModule_Patch.exe” and is the #NukeSped RAT used by Lazarus.

Intel_Ops_io's tweet photo. The patch masqueraded as a legitimate file and had functions to upload and download files, execute code, and to collect system information.

The file was called: “EncryptModule_Patch.exe” and is the #NukeSped RAT used by Lazarus. https://t.co/KhK8WUkAAY

1

2

0

413

Intel-Ops @Intel_Ops_io

over 2 years ago

Lazarus infiltrated a Website Maintance and Repair Supplier of a Maritime Research organization to drop #NukeSped via patch management systems (PMS) to steal trade secrets. After infiltrating the supplier, they accessed the targets web server via stolen SSH keys.

Intel_Ops_io's tweet photo. Lazarus infiltrated a Website Maintance and Repair Supplier of a Maritime Research organization to drop #NukeSped via patch management systems (PMS) to steal trade secrets. After infiltrating the supplier, they accessed the targets web server via stolen SSH keys. https://t.co/PXyAdQLvrh

1

3

1

601

ET Labs @ET_Labs

almost 3 years ago

Great @AhnLab_ASEC investigation of #Andariel group activity stemming from what's assumed to be exploitation of #Apache #ActiveMQ #CVE-2023-46604. SID 2049380 alerts on the #Nukesped check-in thanks to the demonstrated potential HTTP header values: https://t.co/uglHa1puvK

1

0

117

lazarusholic @lazarusholic

almost 3 years ago

"Circumstances of the Andariel Group Exploiting an Apache ActiveMQ Vulnerability (CVE-2023-46604)" published by Ahnlab. #NukeSped, #CVE-2023-46604, #Andariel, #CTI, #OSINT, #LAZARUS https://t.co/ZOVEEuiTFB

0

6

4

1

875

lazarusholic @lazarusholic

almost 3 years ago

"Circumstances of an Attack Exploiting an Asset Management Program (Andariel Group)" published by Ahnlab. #Andariel, #NukeSped, #LilithRAT, #BlackRAT, #TigerRAT, #CTI, #OSINT, #LAZARUS https://t.co/PlWrExFU7q

0

11

8

2

2K

lazarusholic @lazarusholic

about 3 years ago

"Analysis of Andariel's New Attack Activities" published by Ahnlab. #NukeSped, #Andariel, #AndarLoader, #Andardoor, #CTI, #OSINT, #LAZARUS https://t.co/CzsATM8mq1

0

8

6

1

1K

lazarusholic @lazarusholic

about 3 years ago

"Andariel 그룹의 새로운 공격 활동 분석" published by Ahnlab. #Andariel, #NukeSped, #AndarLoader, #Andardoor, #CTI, #OSINT, #LAZARUS https://t.co/0kzWknyIxr

0

10

5

2

629

BCON COLLECTIVE @BCONCOLLECTIVE

over 3 years ago

🚨⚠️Potential #Nukesped/#LIDSHOT #malware🔍 uploaded from South Korea. Only 2 detections on VT: 🔗ddb240cf6125f320330fcba78c3ac219c934ca6c8878bb659a84b7d78ae39ba3 📁FWDataViz.dll LIDSHOT's dual threat: 1️⃣ System enumeration🕵️‍♂️ 2️⃣ Downloading & executing shellcode from C2 🌐

1

37

10

7

7K

Joe Security

@joe4security

about 4 years ago

Nice recent #Nukesped #macOS analysis with PDF decoy calling back via HTTPS. https://t.co/gMTowvYbS3 #malware #dfir #secnew

0

6

5

1

0

JAMESWT @JAMESWT_WT

about 4 years ago

Mentioned Samples +extra #Lazarus for Mac #signers "Name Shankey Nohria" #NukeSped +⚠️extra 👇👇👇 https://t.co/6vgzaGyed3

ESET Research

@ESETresearch

about 4 years ago

#ESETresearch #BREAKING A signed Mac executable disguised as a job description for Coinbase was uploaded to VirusTotal from Brazil 🇧🇷. This is an instance of Operation In(ter)ception by #Lazarus for Mac. @pkalnai @dbreitenbacher 1/7

ESETresearch's tweet photo. #ESETresearch #BREAKING A signed Mac executable disguised as a job description for Coinbase was uploaded to VirusTotal from Brazil 🇧🇷. This is an instance of Operation In(ter)ception by #Lazarus for Mac. @pkalnai @dbreitenbacher 1/7 https://t.co/dXg89el5VT

5

256

130

29

0

1

23

10

2

0

lazarusholic @lazarusholic

about 4 years ago

"APT-C-26（Lazarus）组织伪造电商组件攻击活动分析报告" published by 360Security. #NukeSped, #CTI, #OSINT, #LAZARUS https://t.co/6DeDdsjYhB

0

5

0

1

0

blackorbird

@blackorbird

about 4 years ago

#Lazarus attack Korean Hancom Secure. #NukeSped https://t.co/Bgfp8Qnxow https://t.co/hEMp8vxeBa

0

40

18

7

0

SOC Prime @SOC_Prime

over 4 years ago

VMware Horizon security alert: notorious #Lazarus Group exploits #Log4j to spread #NukeSped malware, attacking entities in South Korea. Detect malicious activity with a #Sigma rule available in the SOC Prime’s platform. https://t.co/C0MDIDFQTb #DFIR #CTI #threatintel #BlueTeam

0

4

2

0

lazarusholic @lazarusholic

over 4 years ago

"Log4Shell 취약점을 악용하는 Lazarus 그룹 (NukeSped)" published by Ahnlab. #NukeSped, #Log4Shell, #CTI, #OSINT, #LAZARUS https://t.co/la9BmEMb7x

0

5

1

0

JAMESWT @JAMESWT_WT

almost 5 years ago

#NukeSped win_fw.dll A8EF73CC67C794D5AA860538D66898868EE0BEC0 missing (Can someone share please?) idahelper.dll DE0E23DB04A7A780A640C656293336F80040F387 https://t.co/hzN5t5yWql

ESET Research

@ESETresearch

almost 5 years ago

IoCs 📄: win_fw.dll A8EF73CC67C794D5AA860538D66898868EE0BEC0 idahelper.dll DE0E23DB04A7A780A640C656293336F80040F387 🚨: Win32/NukeSped.KZ Win64/NukeSped.JS 🌐: devguardmap[.]org #ESETresearch 5/5

5

142

24

7

0

5

2

1

0

JAMESWT @JAMESWT_WT

about 5 years ago

@malwrhunterteam @VK_Intel Mentioned #signed "MATCH CONSULTANTS LTD" Win64/#NukeSped Sample🔽 https://t.co/TCfamg7kGv

0

2

1

0

Top Tweets for #NukeSped

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users