Top Tweets for #PureLogsStealer
Careful with those #cat pics @vxunderground ..might get something more exciting ;) (#stego #purelogsstealer)
https://t.co/G4Nn7mcLhl
Honestly using cat pics in malware seems rude.
8[.]210[.]98[.]219
8[.]223[.]59[.]119
8[.]223[.]56[.]120
AS45102 Alibaba US Technology Co., Ltd 🇭🇰
183[.]60[.]146[.]66
AS4134 Chinanet 🇨🇳
119[.]29[.]29[.]29
AS132203 Tencent Building, Kejizhongyi Avenue 🇨🇳
#PureLogsStealer #RokRAT
![skocherhan's tweet photo. 8[.]210[.]98[.]219
8[.]223[.]59[.]119
8[.]223[.]56[.]120
AS45102 Alibaba US Technology Co., Ltd 🇭🇰
183[.]60[.]146[.]66
AS4134 Chinanet 🇨🇳
119[.]29[.]29[.]29
AS132203 Tencent Building, Kejizhongyi Avenue 🇨🇳
#PureLogsStealer #RokRAT https://t.co/Dd3tNXRT2P](https://pbs.twimg.com/media/G6J5xDMWcAAHHDW.jpg)
![skocherhan's tweet photo. 8[.]210[.]98[.]219
8[.]223[.]59[.]119
8[.]223[.]56[.]120
AS45102 Alibaba US Technology Co., Ltd 🇭🇰
183[.]60[.]146[.]66
AS4134 Chinanet 🇨🇳
119[.]29[.]29[.]29
AS132203 Tencent Building, Kejizhongyi Avenue 🇨🇳
#PureLogsStealer #RokRAT https://t.co/Dd3tNXRT2P](https://pbs.twimg.com/media/G6J5UucWYAAJZXo.jpg)
![skocherhan's tweet photo. 8[.]210[.]98[.]219
8[.]223[.]59[.]119
8[.]223[.]56[.]120
AS45102 Alibaba US Technology Co., Ltd 🇭🇰
183[.]60[.]146[.]66
AS4134 Chinanet 🇨🇳
119[.]29[.]29[.]29
AS132203 Tencent Building, Kejizhongyi Avenue 🇨🇳
#PureLogsStealer #RokRAT https://t.co/Dd3tNXRT2P](https://pbs.twimg.com/media/G6J5KxUWYAARzHo.jpg)
![skocherhan's tweet photo. 8[.]210[.]98[.]219
8[.]223[.]59[.]119
8[.]223[.]56[.]120
AS45102 Alibaba US Technology Co., Ltd 🇭🇰
183[.]60[.]146[.]66
AS4134 Chinanet 🇨🇳
119[.]29[.]29[.]29
AS132203 Tencent Building, Kejizhongyi Avenue 🇨🇳
#PureLogsStealer #RokRAT https://t.co/Dd3tNXRT2P](https://pbs.twimg.com/media/G6J5G2VXYAAHnjC.jpg)
My humble contribution to the Malware Analysis Community.
Hope it helps ! Thanks @malcat4ever
From WinWord to PureLogsStealer with @malcat4ever
#malcat #malware #purelogsstealer
https://t.co/7A0t8Vuk2G
#PureLogsStealer
👇
⛔️C2: 176.65.139[.]19:5888
👇
Samples Collection updated/tagged
✅https://t.co/5p5c0x7IbU
![JAMESWT_WT's tweet photo. #PureLogsStealer
👇
⛔️C2: 176.65.139[.]19:5888
👇
Samples Collection updated/tagged
✅https://t.co/5p5c0x7IbU https://t.co/zYsSiOG2fE](https://pbs.twimg.com/media/G4cGricWoAAE3O8.jpg)
![JAMESWT_WT's tweet photo. #PureLogsStealer
👇
⛔️C2: 176.65.139[.]19:5888
👇
Samples Collection updated/tagged
✅https://t.co/5p5c0x7IbU https://t.co/zYsSiOG2fE](https://pbs.twimg.com/media/G4cFB3BWQAA6Ys7.jpg)
🔥 Allerta malware — PureLogsStealer - Italy
📧 Email con oggetto: “vs. offerta - GES.PO BERLINGO EER 191204”
📎 Allegato RAR — MD5: 20587448fce82d48ded4246d452ff6d7
💀 C2: 176[.]65[.]139[.]19
👉 Non aprire l’allegato!
#malware #cybersecurity #PureLog
![D3LabIT's tweet photo. 🔥 Allerta malware — PureLogsStealer - Italy
📧 Email con oggetto: “vs. offerta - GES.PO BERLINGO EER 191204”
📎 Allegato RAR — MD5: 20587448fce82d48ded4246d452ff6d7
💀 C2: 176[.]65[.]139[.]19
👉 Non aprire l’allegato!
#malware #cybersecurity #PureLog https://t.co/sAXcCvfRWs](https://pbs.twimg.com/media/G3Y_LJuXoAEQUli.png)
#Spam #ita
#PureLogsStealer
⛔️IoCs
172.245.209.]231/366/IMG__pic0099400000300200005050050500500505050050052333.hta
104.168.7.]197/img/optimized_MSI.png
pasteide.]com/raw/c9cdziyhvp
⛔️C2
172.96.140.]131:10709
Samples
https://t.co/pvJeIUDaWJ
![JAMESWT_WT's tweet photo. #Spam #ita
#PureLogsStealer
⛔️IoCs
172.245.209.]231/366/IMG__pic0099400000300200005050050500500505050050052333.hta
104.168.7.]197/img/optimized_MSI.png
pasteide.]com/raw/c9cdziyhvp
⛔️C2
172.96.140.]131:10709
Samples
https://t.co/pvJeIUDaWJ https://t.co/nBLNamDNNJ](https://pbs.twimg.com/media/G2KxV4HXQAAYXyZ.jpg)
![skocherhan's tweet photo. 660+ files
vastkupan[.]com/wp-admin/js/
#PureLogsStealer #opendir @Huntio @abuse_ch https://t.co/pLVU5ipurP](https://pbs.twimg.com/media/GxOSYuzXMAAdPM8.png)
🚨 New C2 Detected!
🔗 151[.]242[.]63[.]30
ℹ️ ASN: AS399486
ℹ️ ASN Organization: VIRTUO
📍 Country: US
📍 City: Edison
📅 2025-07-26T17:50:25
ℹ️ Type: #cnc - #c2
ℹ️ Family: #PureLogsStealer
#ThreatIntelligence #IoCs #Malware
We have been seeing the same activity including #PureLogsStealer at @esthreat 🙂 The writeup is coming up...
Proofpoint is tracking a cluster of cyber threat activity leveraging Cloudflare Tunnels to deliver malware.
https://t.co/h9sYK7EXFf
Activity was first observed in Feb 2024 and increased in May through July. Most recent campaigns have led to Xworm, a remote access trojan (RAT).
Last Seen Hashtags on Sotwe
scat() + filter:videos
Seen from Turkey
mgai()* filter:videos since:2026-10-10
Seen from United Kingdom
بنت_السلطانة
dickpic
Seen from United States
minichat
Seen from Turkey
กลุ่มลับ
Seen from Turkey
minichat()************************************************* *****filter:native_video()
Seen from Turkey
mssethi11
Seen from Turkey
anxiouspandaa(***) filter:native_video
Seen from Netherlands
潮喷
Seen from Germany
Most Popular Users
Elon Musk 
@elonmusk
241.5M followers
Barack Obama
@barackobama
118.8M followers
Cristiano Ronaldo
@cristiano
114.5M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.1M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.3M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.5M followers
Kim Kardashian
@kimkardashian
70.9M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66.5M followers
Bill Gates
@billgates
65.3M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.2M followers
CNN
@cnn
61.7M followers
X
@x
60.7M followers