Top Tweets for #SharpPanda

about 2 years ago

Related: Susp #APT #SharpPanda 878-CV-DU.docx https://t.co/yonyky4xxz Template URL: hxxp://38.54.31[.]43/WindowsTime/Fishing.png

11K

t3ft3lb @t3ft3lb

about 2 years ago

Susp #APT #SharpPanda out.png (#RoyalRoad RTF) https://t.co/b0tZCQXndc WSWtmf.a (5t Downloader) 6dfba2e6ae44c0efc5835e0c5838c5ea C2: hxxp://38.54.31[.]43/WindowsTime/update.php?Data=<encrypted_data> Task: WindowsUpdateTaskMachine - rundll32.exe %TEMP%\WSWtmf.a StartW @nao_sec

$t3ft3lb's tweet photo. Susp #APT #SharpPanda out.png (#RoyalRoad RTF) https://t.co/b0tZCQXndc WSWtmf.a (5t Downloader) 6dfba2e6ae44c0efc5835e0c5838c5ea C2: hxxp://38.54.31[.]43/WindowsTime/update.php?Data=<encrypted_data> Task: WindowsUpdateTaskMachine - rundll32.exe %TEMP%\WSWtmf.a StartW @nao_sec https://t.co/onjwDQWuuD$

17K

Group-IB Threat Intelligence

@GroupIB_TI

about 2 years ago

From late 2023 to early 2024, #SharpPanda has continued to target government entities in the Southeast Asia. Group-IB researchers have spotted several initial infection vectors (documents/executables) similar to previous Sharp Panda operations. These malicious files deliver the notable 5.t #downloader.

nao_sec @nao_sec

over 2 years ago

I updated rr_decoder! This update supports the new #RoyalRoad encoding [614a860c] used by #FirePeony (aka #SharpPanda) 🎉 CC: @t3ft3lb https://t.co/cWO3FYEZ7y

nao_sec's tweet photo. I updated rr_decoder! This update supports the new #RoyalRoad encoding [614a860c] used by #FirePeony (aka #SharpPanda) 🎉 CC: @t3ft3lb
https://t.co/cWO3FYEZ7y https://t.co/RVrobWJ6Iy

nao_sec @nao_sec

over 2 years ago

Long time no see! #FirePeony (aka #SharpPanda) #RoyalRoad RTF -> 5.t Downloader https://t.co/GZXiV488Q3

NTTセキュリティ @NTTSH_JP

almost 3 years ago

弊社SOCアナリストの林と小池が、2023/10/4～6に開催されるVB2023 LONDONにて、「FirePeony: a ghost wandering around the Royal Road」というタイトルで講演を行います。講演内容について、後日ブログで紹介する予定ですので、ご期待ください。 #VB2023 #FirePeony #SharpPanda https://t.co/gvBJsMKdwT

nao_sec @nao_sec

almost 3 years ago

#SharpPanda is targeting Japan? Japanese #RoyalRoad RTF is extremely rare🤔 https://t.co/XzhBpGqEJm

16K

Lee Archinal @ArchinalLee

about 3 years ago

The threat actor #SharpPanda is the focus of this #readoftheday by @MonThreat . This time they were targeting G20 members with a sophisticated phishing email that deploy a downloader. #HappyHunting! #CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting

ArchinalLee's tweet photo. The threat actor #SharpPanda is the focus of this #readoftheday by @MonThreat . This time they were targeting G20 members with a sophisticated phishing email that deploy a downloader. #HappyHunting!

#CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting https://t.co/Rjh7lnmiH2

682

ET Labs @ET_Labs

about 3 years ago

from @StopMalvertisin, Request and Retrieval sigs for #SharpPanda #APT within 2046146-2046148... https://t.co/zOTp9saGOS

Kimberly @StopMalvertisin

about 3 years ago

#SharpPanda #APT -> G7 decoy document Email: f39442edc4a96ce729e50f66901263e1 [FINAL] Hiroshima Action Statement for Resilient Global Food Security_trackchanged.docx ea889308acb4249af92807cc7d70f084

StopMalvertisin's tweet photo. #SharpPanda #APT -> G7 decoy document

Email: f39442edc4a96ce729e50f66901263e1

[FINAL] Hiroshima Action Statement for Resilient Global Food Security_trackchanged.docx
ea889308acb4249af92807cc7d70f084 https://t.co/fu3A55YfLO

223

Amitav Bhattacharjee

@bamitav

about 3 years ago · Anekal Bangaluru

#SharpPanda APT Campaign Expands its Arsenal Targeting #G20 Nations! https://t.co/FIAe8Ga7mm #RCE #ZeroTrust #ZeroDay #cybercrime #hacker #privacy #APT #bot #CISO #DDoS #hacking #phishing #CyberAttack #cybersecurity #Security #infosec #AppSec #CyberSec #databreach #Hacked #RT

239

ThreatMon

@MonThreat

about 3 years ago

🚨 ThreatMon's new report is published! 📣 🔒🌐 Threat Analysis: SharpPanda APT's Attack Chain Targeting G20 Nations 🔒🌐 🔍 Our latest #report delves into the sophisticated #attack chain employed by #SharpPanda, a notorious #APT group, to target #G20 member countries. 🎯 📧 Starting with convincing #phishing emails, followed by malicious phishing documents embedded with remote templates, SharpPanda gains control over their victims' systems. 💻 💥 The deployment of downloader DLLs adds another layer of stealth, allowing the attackers to download additional malicious payloads undetected. 🕵‍ 💡 Understanding the intricacies of this attack chain is crucial to enhancing cybersecurity and defending against state-sponsored threats. 🔐 Join us in #uncovering the #tactics, #techniques, and #procedures employed by SharpPanda, safeguarding critical information and national interests. 💪 Read the full report 👉 https://t.co/Q5jDUZvHEk #reports #threatanalysis #hacker #cyber #cybersecurity #cyberattack #threatmon

MonThreat's tweet photo. 🚨 ThreatMon's new report is published! 📣

🔒🌐 Threat Analysis: SharpPanda APT's Attack Chain Targeting G20 Nations 🔒🌐

🔍 Our latest #report delves into the sophisticated #attack chain employed by #SharpPanda, a notorious #APT group, to target #G20 member countries. 🎯

📧 Starting with convincing #phishing emails, followed by malicious phishing documents embedded with remote templates, SharpPanda gains control over their victims' systems. 💻

💥 The deployment of downloader DLLs adds another layer of stealth, allowing the attackers to download additional malicious payloads undetected. 🕵‍

💡 Understanding the intricacies of this attack chain is crucial to enhancing cybersecurity and defending against state-sponsored threats.

🔐 Join us in #uncovering the #tactics, #techniques, and #procedures employed by SharpPanda, safeguarding critical information and national interests. 💪

Read the full report 👉 https://t.co/Q5jDUZvHEk

#reports #threatanalysis #hacker #cyber #cybersecurity #cyberattack #threatmon

SOC Prime @SOC_Prime

about 3 years ago

#Sigma rules to detect #SharpPanda, China-backed #APT group targeting #G20 nations with advanced malicious tooling in its latest campaign. https://t.co/vwysca9ebD #malware #cyberattack #BlueTeam #SOC #cybersec #threathunting #threatdetection

SOC_Prime's tweet photo. #Sigma rules to detect #SharpPanda, China-backed #APT group targeting #G20 nations with advanced malicious tooling in its latest campaign.

https://t.co/vwysca9ebD

#malware #cyberattack #BlueTeam #SOC #cybersec #threathunting #threatdetection https://t.co/51uV1N1the

527

Threat Intelligence @threatintel

about 3 years ago

#ThreatProtection #SharpPanda #APT group inflates its spear-phishing campaign. Read more: https://t.co/cSdXqmuuxW #Cybercrime #Cybersecurity

Cyber_OSINT @Cyber_O51NT

about 3 years ago

#SharpPanda APT Campaign Expands its Arsenal Targeting G20 Nations https://t.co/ZZsakou8KM?

Kimberly @StopMalvertisin

about 3 years ago

#SharpPanda #APT -> G7 decoy document Email: f39442edc4a96ce729e50f66901263e1 [FINAL] Hiroshima Action Statement for Resilient Global Food Security_trackchanged.docx ea889308acb4249af92807cc7d70f084

t3ft3lb @t3ft3lb

about 3 years ago

#APT #SharpPanda 5.t Downloader https://t.co/xv6qsiNaew DLL name: Downloader.dll Export funcs: StartA and 3 of md5* URL: hxxps://13.236.189[.]80:8001/G0AnyWhere_up.jsp?Data=<encrypted_data> (Base64 + RC4 - key "xkYgv127") Task "Windows Update" - rundll32.exe %Temp%\c6gt.b StartA

$t3ft3lb's tweet photo. #APT #SharpPanda 5.t Downloader https://t.co/xv6qsiNaew DLL name: Downloader.dll Export funcs: StartA and 3 of md5* URL: hxxps://13.236.189[.]80:8001/G0AnyWhere_up.jsp?Data=<encrypted_data> (Base64 + RC4 - key "xkYgv127") Task "Windows Update" - rundll32.exe %Temp%\c6gt.b StartA https://t.co/RFfXT9Qw9j$

nao_sec @nao_sec

about 3 years ago

#SharpPanda changed its target? It's the first time for me I've seen them target Western countries. CC: @aRtAGGI @_CPResearch_

nao_sec @nao_sec

about 3 years ago

#SharpPanda is using G7 decoy document (#RoyalRoad) to attack a wide range of G20 governments🐼 https://t.co/cFiB57nNEA

18K

Digital_Monet @aRtAGGI

about 3 years ago

Incredibly excited to be speaking at #HagueTix2023 @HagueTIX in June about @threatinsight's observed changes in the APT phishing landscape following the disablement of #microsoftoffice #Macros. Check it out for #CTI about #TA423 #APT40 #SharpPanda #BackDoorDiplomacy #TA416 🇨🇳✉️☣️

HagueTIX @HagueTIX

about 3 years ago

Thrilled to announce our speaker line-up for #HagueTIX2023 & that ticket sales are open (limited amount of tickets only)! ➡ https://t.co/wnFziGkQLV @monica_kaminska @xbouwman @fggaleiden @ISGA_Hague @TheHagueProgram

16K

Critical Start @CRITICALSTART

over 3 years ago

The Sharp Panda threat group recently included the new version of the Soul framework to execute their cyber attacks. Read more in our Intel Hub update. https://t.co/i648Wsjos7 #cyberthreat #cybersecurity #mdr #cybercontent #sharppanda #cyberintelligence

137

Top Tweets for #SharpPanda

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users