Top Tweets for #Revcode
Researchers at @TrendMicro have uncovered a new #cybercriminal campaign attempting to exploit the current circumstances to trick remote workers into install #RevCode WebMonitor #RAT. #dynamicCISO #linux #girlswhocode @rneelmani @hacback17
https://t.co/TKjGl5ZjzX
@VK_Intel @guelfoweb @VirITeXplorer @Certego_IRT @matte_lodi @reecdeep @merlos1977 @luc4m @malwrhunterteam @James_inthe_box @FewAtoms @Arkbird_SOLG @58_158_177_102 @sugimu_sec @bry_campbell @Jirehlov ok looks like is the same #revcode #rat
https://t.co/kzSG791Ci6
#revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_
![James_inthe_box's tweet photo. #revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/0nPfGfcsmX](https://pbs.twimg.com/media/EP8cveZVAAACuIb.png)
![James_inthe_box's tweet photo. #revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/0nPfGfcsmX](https://pbs.twimg.com/media/EP8cvc9UEAAQJKz.png)
![James_inthe_box's tweet photo. #revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/0nPfGfcsmX](https://pbs.twimg.com/media/EP8cvc6U0AEOQdB.png)
![James_inthe_box's tweet photo. #revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/0nPfGfcsmX](https://pbs.twimg.com/media/EP8cvc3VAAckhcE.jpg)
#revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_
@Arkbird_SOLG @cyberwar_15 @_jsoo_ @VK_Intel @0xffff0800 @JAMESWT_MHT @blackorbird @Timele9527 @RedDrip7 @Rmy_Reserve @shotgunner101 And cc @hasherezade on the #revcode goodness...maybe newer version.
Last year, an unknown actor distributed phishing via @wallamail, that infected Israeli victims with a crafted @ScreenConnect implant. Same actor now returns to a 2nd round via Fb:
An APK wrapped with #RevCode WebMonitor (recently covered by @briankrebs -https://t.co/RkIiPmSwsC)
@KorbenD_Intel @malwrhunterteam @FewAtoms @58_158_177_102 @h4ckak @MinhTrietPT @vupt_bka @krNeoTra @blackorbird @unpacker @mstoned7 @issuemakerslab @HONKONE_K @SeraphimDomain @anyrun_app New exe is #revcode #rat, c2 is same as earlier.
@KorbenD_Intel @malwrhunterteam @FewAtoms @58_158_177_102 @h4ckak @MinhTrietPT @vupt_bka @krNeoTra @blackorbird @unpacker @mstoned7 @issuemakerslab @HONKONE_K And #revcode #rat c2 is:
https://151.106.0[.]80/recv4.php
![James_inthe_box's tweet photo. @KorbenD_Intel @malwrhunterteam @FewAtoms @58_158_177_102 @h4ckak @MinhTrietPT @vupt_bka @krNeoTra @blackorbird @unpacker @mstoned7 @issuemakerslab @HONKONE_K And #revcode #rat c2 is:
https://151.106.0[.]80/recv4.php https://t.co/RlhL8vOgXQ](https://pbs.twimg.com/media/D7SOxmkXoAAZjRj.png)
@James_inthe_box @malwrhunterteam @dvk01uk @JAMESWT_MHT @malware_traffic @makflwana @Antelox @VK_Intel @avman1995 so we have #avemaria stealer dropping #revcode rat .. thanks @James_inthe_box !
#malspam "Samsung" drops #revcode rat from s/procw.pw/zone.exe s/procw.pw/file.exe (VBAY:2ed3f039f2479a41faff3d0af8dc651b)
c2 is tricky: google,se but..
@malwrhunterteam @dvk01uk @James_inthe_box @JAMESWT_MHT @malware_traffic @makflwana @Antelox @VK_Intel @avman1995
@James_inthe_box @neonprimetime @FewAtoms @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ #Revcode #RAT #AgentTesla #Opendir
htxp://buildentconstructions.com/Stubs/
https://t.co/lPxxlfUarI
dumped:
https://t.co/OzSPyuZso3
unmapped(upx):
https://t.co/mPnO86c5tI
unpacked:
https://t.co/L2yMcr2RQW
Actor:
[email protected]
@FewAtoms Some #agenttesla in here, but test.exe and Uncleared_Accounts&OctoberInvoice.exe are #revcode #rat c2 is:
http://mostrugged.wm01[.]to/recv3.php
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_
![James_inthe_box's tweet photo. @FewAtoms Some #agenttesla in here, but test.exe and Uncleared_Accounts&OctoberInvoice.exe are #revcode #rat c2 is:
http://mostrugged.wm01[.]to/recv3.php
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/QRODwRhMvX](https://pbs.twimg.com/media/Dq8FkWwUwAAaiYJ.jpg)
@FewAtoms Your m.exe is #revcode #rat, c2 is:
mercymorrgan.wm01[.]to
traffic snippet:
keyauth=RmliMFVPeVJnaTNUUVB5ZHw4ZTc4NWY1OGE5Y2NmNGZkZmM1OTI0OTY0ZTU4MGE0OXwyMTg4MXw1MTJ8MjA4OTg=&key=82ozMRutsEZPNU2aI97R91uy8G1D9geo&uid=7ae64ebe2fe69135ee62be48a08e4255&user=mercymorrgan&cmp=0&enc=0
A new one on me...#revcode #rat dropped via #malspam subject: "REQUEST FOR QUOTATION - HSL EnC" r00 attachment
https://t.co/UC94ItSmrq
cc @hasherezade
Last Seen Hashtags on Sotwe
feet #gay #yaoi
Seen from Mexico
chavbop
Seen from United Kingdom
AuthorsOfTwitter
Seen from United States
ngintipmandi
Seen from Indonesia
DirtyTalk
Seen from Germany
thighjobs
Seen from Pakistan
vgkids
Seen from United States
BreastCancerAwareness
Seen from United States
ometv
Seen from United Kingdom
hairfetish
Seen from Singapore
Most Popular Users
Elon Musk 
@elonmusk
240.9M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Cristiano Ronaldo
@cristiano
111.4M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
97.9M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.1M followers
KATY PERRY
@katyperry
88.1M followers
Taylor Swift
@taylorswift13
82M followers
Lady Gaga
@ladygaga
73.5M followers
Virat Kohli
@imvkohli
70.6M followers
Kim Kardashian
@kimkardashian
70M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.1M followers
Neymar Jr
@neymarjr
63.4M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.9M followers
Selena Gomez
@selenagomez
61.2M followers
X
@x
60.8M followers