#PsixBot - Twitter Hashtag

almost 6 years ago

The community #ThreatHunting rule by Ariel Millahuel helps to discover the behavior of newly discovered samples of #PsiXBot #malware. https://t.co/SaQn1dEJKH

0

3

0

Xcitium @getxcitium

almost 6 years ago

Comodo Threat Intelligence | PSIXBOT – Learn about versions and behavior of PSIXBOT https://t.co/AusJPQct5f #malware #PSIXBOT

1

2

1

0

Nick Carr

@ItsReallyNick

over 6 years ago

@seckle_ch Fresh PsiX/#PsiXBot configured with DNS-over-HTTPS provider doh.securedns[.]eu 👀 https://t.co/AvODni61eu #DoH

Nick Carr

@ItsReallyNick

over 6 years ago

I came for the InstallUtil payload and stayed for character insertion obfuscation and rare #DoH provider ➡️doh.securedns[.]eu ➡️greentowns[.]hk "wfpcl.exe" (9/69): https://t.co/JYUgvq2ojR Similar to #PsiXBot: https://t.co/ulYZshGbeW (w/ new #DoH provider, cc @stvemillertime)

ItsReallyNick's tweet photo. I came for the InstallUtil payload and stayed for character insertion obfuscation and rare #DoH provider
➡️doh.securedns[.]eu
➡️greentowns[.]hk

"wfpcl.exe" (9/69): https://t.co/JYUgvq2ojR

Similar to #PsiXBot: https://t.co/ulYZshGbeW (w/ new #DoH provider, cc @stvemillertime) https://t.co/i4OJ3zyTuB

2

39

8

6

0

1

0

Nick Carr

@ItsReallyNick

over 6 years ago

I came for the InstallUtil payload and stayed for character insertion obfuscation and rare #DoH provider ➡️doh.securedns[.]eu ➡️greentowns[.]hk "wfpcl.exe" (9/69): https://t.co/JYUgvq2ojR Similar to #PsiXBot: https://t.co/ulYZshGbeW (w/ new #DoH provider, cc @stvemillertime)

2

39

8

6

0

Threat Insight

@threatinsight

over 6 years ago

#PsiXBot Modular #Malware Gets New Sextortion, Google DoH Upgrades. https://t.co/rCxRjiOqes via @BleepinComputer

0

2

0

Proofpoint

@proofpoint

over 6 years ago

#PsiXBot Adds PornModule, Google DNS Service to Its Arsenal: https://t.co/kN20iy3Ora via @threatpost

0

2

0

Cybercrimeinfo (ccinfo) @CCINLCybercrime

over 6 years ago

#PsiXBot' is de naam van deze #malware en verspreidt zich via Word-#documenten met kwaadaardige #macro's en oude #kwetsbaarheden in #Adobe #Flash #Player en #Internet #Explorer... https://t.co/PVnTqU9lFP #Cybercrime #Cybercriminaliteit #CCINL #Cybercrimeinfo

CCINLCybercrime's tweet photo. #PsiXBot' is de naam van deze #malware en verspreidt zich via Word-#documenten met kwaadaardige #macro's en oude #kwetsbaarheden in #Adobe #Flash #Player en #Internet #Explorer...

https://t.co/PVnTqU9lFP

#Cybercrime #Cybercriminaliteit #CCINL #Cybercrimeinfo https://t.co/VWqXWK6fse

1

3

1

0

Bob Carver ✭ @cybersecboardrm

over 6 years ago

PsiXBot malware upgraded with Google DNS over HTTPS, sexploitation kit | ZDNet https://t.co/ECjicjp45d #PsiXBot #malware #google #DNSoverHTTPS #C2 #sexploitation #CyberSecurity #infosec #CyberSecurity #infosec

cybersecboardrm's tweet photo. PsiXBot malware upgraded with Google DNS over HTTPS, sexploitation kit | ZDNet https://t.co/ECjicjp45d #PsiXBot #malware #google #DNSoverHTTPS #C2 #sexploitation #CyberSecurity #infosec #CyberSecurity #infosec https://t.co/oq8rRfAjQV

1

11

10

0

Milagro Digital Risk Intelligence @JinibaBD

over 6 years ago

WARNING! #PsiXBot Adds #PornModule, #Google #DNS Service to Its Arsenal #cybersec #cybersecurity #threatintel #cyberthreats #hackers #cybercrime #phishing #malware #ransomware #cyberattacks #databreach #dataprotection #privacy #cyberdefence https://t.co/VP34Ahdy9F

0

5

0

Proofpoint

@proofpoint

over 6 years ago

#PsiXBot Now Using Google DNS over HTTPS and Possible New Sexploitation Module. https://t.co/dOlTR0T9Ga

0

3

0

1

0

ThreatDown @Threat_Down

almost 7 years ago

#SpelevoEK dropping #PsiXBot via malvertising. Post infection traffic shows use of DNS over HTTPS (also spotted by @seckle_ch). - IOCs - PsiXBot: 9ad882cb481d6f9fb2ea2f4e6195d9b7a8ba5076305767a3af0a0874da76e067 C2: the-best[.]hk,194.58.108[.]187