Top Tweets for #ResolverRAT
@netresec @JAMESWT_WT @AndreaDraghetti @signorina37H @guelfoweb @VirITeXplorer @1ZRR4H @0xToxin @pr0xylife @ShadowOpCode @marsomx_ @anyrun_app Thanks for sharing Erik!
I think there are some more C2 IPs connected to this TA:
(via pDNS & SMB NetBIOS)
https://t.co/RNDVYdtwjq
2025-08-08 - 94.26.90[.245
2025-07-02 - 45.74.10[.38
2025-06-22 - 74.208.226[.175
2025-03-26 - 176.65.144[.162
#AsyncRAT
#ResolverRAT
#server60929
@JAMESWT_WT @AndreaDraghetti @signorina37H @guelfoweb @VirITeXplorer @1ZRR4H @0xToxin @pr0xylife @c_APT_ure @ShadowOpCode @marsomx_ @anyrun_app This transcript of ANY.RUN PCAP displays several #ResolverRAT / #PureRAT indicators:
🔢 04 00 00 00 (before TLS)
🔑 Client and server run TLS 1.0
📅 X.509 cert expires 9999-12-31
More details on PureRAT indicators here:
https://t.co/GlSDXfsgP0
@JAMESWT_WT @AndreaDraghetti @signorina37H @guelfoweb @VirITeXplorer @1ZRR4H @0xToxin @pr0xylife @c_APT_ure @ShadowOpCode @marsomx_ #PureRAT aka #ResolverRAT is dropped in the execution on @anyrun_app
How to identify #PureRAT (aka #ResolverRAT) on the network:
⛳️ C2 port is often 56001, 56002 or 56003
🔢 Bot sends 04 00 00 00, then TLS handshake
🔑 Client and server run TLS 1.0
🖊️ X.509 cert is self signed
📅 X.509 cert expires 9999-12-31
https://t.co/GlSDXfsgP0
#ResolverRAT is a new #backdoor that uses advanced persistence mechanism, certificate validation, obfuscation, & C2 architecture to stay undetected. Protect yourself by deploying our public #YARArules.👇 https://t.co/B7SxBoRDet
🚨 Meet #ResolverRAT, a stealthy #RAT that lives entirely in memory, targeting healthcare & pharma orgs with localized #phishing in Czech, Hindi, & Italian.
Evading EDR with AES-256, IP rotation & event hijacking.
📽️ Watch our latest short to learn more: https://t.co/C2W7hgm7tT
#ResolverRAT is a sophisticated remote access trojan (#RAT) targeting #healthcare and #pharmaceutical sectors globally. @morphisec reported on the recent attack wave. Check out our blog for more info and PolySwarm’s ResolverRAT samples.
https://t.co/why8ZhgnmK
🚨🪝 Scammers are targeting healthcare and pharma firms with phishing emails in their native languages, leading to infections by a new, evasive malware called #ResolverRAT.
Read: https://t.co/vNVk0nXex1
#CyberSecurity #Malware #Phishing #Healthcare
کمپین ResolverRAT؛ حمله به بخش سلامت و داروسازی توسط فیشینگ
#Cybersecurity #Cybersecurity_News #اخبار_امنیت_سایبری #Lumma #فیشینگ #Phishing #Malware #بدافزار #ResolverRAT #Rhadamanthys
https://t.co/dBtG4Q2PvC
This IOC is mentioned in @morphisec #ResolverRAT blog post
ec189b7ce68cb308139f6a5cf93fd2dc91ccf4432dc09ccaecb9de403a000c73
https://t.co/46dfVywvRD
(5)
新たなResolverRATマルウェアが世界中の製薬会社や医療機関を標的に
New ResolverRAT malware targets pharma and healthcare orgs worldwide #BleepingComputer (Apr 14)
#ResolverRAT #医療セキュリティ #フィッシング攻撃 #メモリ内マルウェア #RAT
https://t.co/UkjUzGqWVk
Last Seen Hashtags on Sotwe
文字コラ動画
Seen from Japan
あだ名がパセリだった
Seen from United States
beurette video
Seen from France
deathpenaltyfail
Seen from United States
ngentot di kelas.
MOMSON() +filter:native_video
Seen from United States
momson()+*+*+filter:native_video
Seen from Argentina
ometv
Seen from Argentina
DanielleSmithIsUnfitToLead
Seen from United Kingdom
shemales
Most Popular Users
Elon Musk 
@elonmusk
241M followers
Barack Obama
@barackobama
119.2M followers
Cristiano Ronaldo
@cristiano
111.9M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
98M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.2M followers
KATY PERRY
@katyperry
88.4M followers
Taylor Swift
@taylorswift13
82.2M followers
Lady Gaga
@ladygaga
73.7M followers
Virat Kohli
@imvkohli
71M followers
Kim Kardashian
@kimkardashian
70.1M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.3M followers
Neymar Jr
@neymarjr
63.9M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.8M followers
Selena Gomez
@selenagomez
61.4M followers
X
@x
60.8M followers