Top Tweets for #Threadkit
If your looking for a Thread Repair solution available for immediate collection of FREE next day delivery then look no further. Check out our website. https://t.co/exqGMuv0PG #helicoils #baercoil #threadrepair #engineering #ireland #repairkit #threadkit

#Threadkit exploit kit is distributing #Formbook malware targeting an old vulnerability. The 2017 bug was discovered, exploited and patched back in July 2017, but that hasnβt stopped it from viewing the exploit as still valuable. https://t.co/ZvxUXVrmC1
Pretty sweet #threadkit doc via #malspam, is #pony with c2 of:
http://www.a10gamesa10[.]com/php/gate.php
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_
![James_inthe_box's tweet photo. Pretty sweet #threadkit doc via #malspam, is #pony with c2 of:
http://www.a10gamesa10[.]com/php/gate.php
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/4iBrhKhlFC](https://pbs.twimg.com/media/DxxC_ULX4AEXa0q.jpg)
New #ThreadKit campaign. Malicious doc (RTF exploit #CVE-2017-8570) drops SCT, decoy doc, cmd files, kill-switch (blOCk.tXt) and finally payload named "saver.scr".
https://t.co/jkXEVUaS7U
https://t.co/dfs1qVgj4s


Despite arrest of #CobaltGroup's ringleader early this year, the #threat group is ramping up their malicious behavior. https://t.co/95fDr3J4Xn
#malware #threadkit #cryptography #hacks

#threadkit dropping #formbook via #malspam; c2 sites here:
https://t.co/N5o23y0dhA
hash aa590a773eb2297f2d474d11792f6311 for the doc on @mal_share

@MattCulbert @unixronin @JRoosen @dms1899 @Mesiagh @JAMESWT_MHT @executemalware @Techhelplistcom @NelsonSecurity @HazMalware @neonprimetime @dvk01uk @avman1995 @DynamicAnalysis @hexlax @malware_traffic @ps66uk First run is absolutely #LokiBot, doc uses #threadkit by the look of it...not sure what to make of <snicker> this though.

@makflwana @dvk01uk @JAMESWT_MHT @malwrhunterteam @malware_traffic @iCyberFighter @VK_Intel @JR0driguezB @HerbieZimmerman @0xtadavie @WDSecurity @Ring0x0 @hexlax @EscInSecurity @mustarddawg @Techhelplistcom @cocaman @mesa_matt @kafeine Done, should match the initial #threadkit and this recent one.
https://t.co/KqrYLXv52D
@makflwana @dvk01uk @JAMESWT_MHT @malwrhunterteam @malware_traffic @iCyberFighter @VK_Intel @JR0driguezB @HerbieZimmerman @0xtadavie @WDSecurity @Ring0x0 @hexlax @EscInSecurity @mustarddawg @Techhelplistcom @cocaman @mesa_matt @kafeine Done, should match the initial #threadkit and this recent one.
https://t.co/KqrYLXv52D
@dvk01uk @JAMESWT_MHT @malwrhunterteam @malware_traffic @iCyberFighter @VK_Intel @JR0driguezB @HerbieZimmerman @0xtadavie @WDSecurity @Ring0x0 @hexlax @EscInSecurity @mustarddawg @makflwana @Techhelplistcom @cocaman @mesa_matt @kafeine Aye #threadkit delivery method.
Researchers are warning businesses to prepare for potential widespread #cyberattacks using the @Windows #DoubleKill exploit code; exploit found incorporated into the #RIGExploit Kit and #ThreadKit #crimeware packages @kellymsheridan @DarkReading - https://t.co/OkwaZKoUb8

Looks like a modified #threadkit doc but I don't know what the payload is. It does periodically run a .txt file as an EXE and I'm guessing the DNS requests are connectivity checks. Any thoughts? @Antelox @malwrhunterteam @James_inthe_box @avman1995
https://t.co/WyG6EOODrf

Two #threadkit #rtf docs dropping #Azorult both docs had 8/59 on VT and one seemed blockchain themed.
maksssnd[.]beget[.]tech/index.php
94[.]250.248.105/task.bat
https://t.co/Vum1aW8gfP
https://t.co/DeUo3upJyN
![Zerophage1337's tweet photo. Two #threadkit #rtf docs dropping #Azorult both docs had 8/59 on VT and one seemed blockchain themed.
maksssnd[.]beget[.]tech/index.php
94[.]250.248.105/task.bat
https://t.co/Vum1aW8gfP
https://t.co/DeUo3upJyN https://t.co/uwbQHjuJhy](https://pbs.twimg.com/media/DeuF4e8WAAEzveD.jpg)
#threadkit , bad times ahead if you open this maldoc.. "Urgent Overdue Outstanding Payement.doc"
https://t.co/cwRyMJ0GXD

"This version is probably using #Threadkit which is an office doc exploit builder using the Microsoft Equation Editor Exploits CVE-2017-11882 and CVE-2017-8570 and other office exploits instead of Macros". Nice post! π https://t.co/Atdz53g3lx
Unraveling #ThreadKit: New document exploit builder used to distribute The Trick, Formbook, Loki Bot and other malware https://t.co/gIEvBp0dgm #Security #malware #exploit

Booby-trapped Office Docs Built with ThreadKit Trigger CVE-2018-4878 Flaw https://t.co/qHS4SH2r2C #Vulnerabilities #Hacking #Threadkit #Malware #Cybersecurity #infosec #ThreatIntel #CyberIntel
Last Seen Hashtags on Sotwe
Ψ΅ΨΊΩΨ±Ψ©
Seen from United Kingdom
beurettevidΓ©os
Seen from Belgium
beurette
Seen from France
ΰΈ£ΰΈ±ΰΈΰΈΰΈ²ΰΈΰΈΰΈΰΈΰΉΰΈΰΉΰΈ
Seen from Thailand
goon
Seen from Mexico
beach
Seen from Spain
iraqi
Seen from Germany
κ΅λ³΅ν
Seen from United States
ΰΈ«ΰΈΰΈ±ΰΈxΰΈΰΈ£ΰΈ΄ΰΈΰΈΰΈ΅ΰΉ
Seen from Thailand
bursatravesti
Seen from Turkey
Trends for you
Most Popular Users

Elon Musk 
@elonmusk
241.1M followers

Barack Obama 
@barackobama
119.1M followers

Cristiano Ronaldo 
@cristiano
112.6M followers

Donald J. Trump 
@realdonaldtrump
111.8M followers

Narendra Modi 
@narendramodi
107.1M followers

Rihanna 
@rihanna
98.2M followers

NASA 
@nasa
92.2M followers

Justin Bieber 
@justinbieber
91.4M followers

KATY PERRY 
@katyperry
88.8M followers

Taylor Swift 
@taylorswift13
82.7M followers

Lady Gaga 
@ladygaga
74.2M followers

Virat Kohli 
@imvkohli
71.7M followers

Kim Kardashian 
@kimkardashian
70.3M followers

YouTube 
@youtube
68.7M followers

Neymar Jr 
@neymarjr
64.6M followers

Bill Gates 
@billgates
64.5M followers

The Ellen Show
@theellenshow
62.4M followers

Selena Gomez 
@selenagomez
61.9M followers

CNN 
@cnn
61.8M followers

X 
@x
60.8M followers




![James_inthe_box's tweet photo. Pretty sweet #threadkit doc via #malspam, is #pony with c2 of:
http://www.a10gamesa10[.]com/php/gate.php
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/4iBrhKhlFC](https://pbs.twimg.com/media/DxxC_UKUwAAvU3Z.jpg)










![Zerophage1337's tweet photo. Two #threadkit #rtf docs dropping #Azorult both docs had 8/59 on VT and one seemed blockchain themed.
maksssnd[.]beget[.]tech/index.php
94[.]250.248.105/task.bat
https://t.co/Vum1aW8gfP
https://t.co/DeUo3upJyN https://t.co/uwbQHjuJhy](https://pbs.twimg.com/media/DeuF3xsXcAEfoAp.jpg)




