Top Tweets for #PhantomNet
Susp #APT #TA428 activity. Our team has discovered a #PhantomNet (#SManager), which was uploaded to VT from Singapore: https://t.co/AcPBRHxoA5
C2: associate[.]feedfoodconcerning[.]info:443
associate[.]freeonlinelearningtech[.]com:443
associate[.]freeonlinelearningtech[.]com:8443
![GroupIB_TI's tweet photo. Susp #APT #TA428 activity. Our team has discovered a #PhantomNet (#SManager), which was uploaded to VT from Singapore: https://t.co/AcPBRHxoA5
C2: associate[.]feedfoodconcerning[.]info:443
associate[.]freeonlinelearningtech[.]com:443
associate[.]freeonlinelearningtech[.]com:8443 https://t.co/00VI0DYym2](https://pbs.twimg.com/media/Fx8wfJNakAA5ZVf.jpg)

We discovered another variant of the #smanager (#phantomnet) backdoor used by #ta428. The main difference is the use of OpenSSL for communication and more complex architecture. Examples of RTTI object names in the old and new versions

#ESETresearch discovered a new supply-chain attack against a certification authority in Southeast Asia. Installers of the GCA software, distributed on https://t.co/25L6p9gmyW, were modified to deliver #PhantomNet (aka #SMananger) @ulexec @matthieu_faou
https://t.co/X8MMibdhRH 1/4
The malicious installers were hosted on https://t.co/25L6p9gmyW in July and August 2020. Though we didnโt reach a conclusive attribution, we noticed that the #PhantomNet instance shows similarities with #TManger samples that were previously used by TA428. 2/4

#ESETresearch discovered a new supply-chain attack against a certification authority in Southeast Asia. Installers of the GCA software, distributed on https://t.co/25L6p9gmyW, were modified to deliver #PhantomNet (aka #SMananger) @ulexec @matthieu_faou
https://t.co/X8MMibdhRH 1/4
#Smanager, a variant of #Tmanger, may have been used against Southeast Asia. Smanager is also similar to #PhantomNet

Most Popular Users

Elon Musk 
@elonmusk
240.6M followers

Barack Obama 
@barackobama
119.2M followers

Donald J. Trump 
@realdonaldtrump
111.7M followers

Cristiano Ronaldo 
@cristiano
110.5M followers

Narendra Modi 
@narendramodi
107M followers

Rihanna 
@rihanna
97.6M followers

NASA 
@nasa
92.2M followers

Justin Bieber 
@justinbieber
90.9M followers

KATY PERRY 
@katyperry
87.6M followers

Taylor Swift 
@taylorswift13
81.5M followers

Lady Gaga 
@ladygaga
73M followers

Virat Kohli 
@imvkohli
69.8M followers

Kim Kardashian 
@kimkardashian
69.8M followers

YouTube 
@youtube
68.7M followers

Bill Gates 
@billgates
63.9M followers

Neymar Jr 
@neymarjr
62.6M followers

The Ellen Show
@theellenshow
62.4M followers

CNN 
@cnn
61.9M followers

X 
@x
60.8M followers

Selena Gomez 
@selenagomez
60.7M followers

![GroupIB_TI's tweet photo. Susp #APT #TA428 activity. Our team has discovered a #PhantomNet (#SManager), which was uploaded to VT from Singapore: https://t.co/AcPBRHxoA5
C2: associate[.]feedfoodconcerning[.]info:443
associate[.]freeonlinelearningtech[.]com:443
associate[.]freeonlinelearningtech[.]com:8443 https://t.co/00VI0DYym2](https://pbs.twimg.com/media/Fx8wfJNaMAE6p2R.png)






