Top Tweets for #UAdmin

Andrea (Drego) Draghetti 👨🏻‍💻 🎣 @AndreaDraghetti

over 2 years ago

Two last words of the #V3B phishing kit! This kit is a re-brand of the famous #UAdmin phishing kit, very versatile kit detected in the first version in 2017! In 2021, however, the Ucranian police arrested its creator. Secondary markets for resale have therefore sprung up!

1

2

0

0

389

Fox_threatintel @banthisguy9349

over 2 years ago

#uadmin #reliable #phishing found 37.72.168.252/be/chop/chop/PIRATERIJ/adm.php 87.236.146.164/admin/login 104.244.75.151/admin/login 162.0.239.39/be/chop/chop/PIRATERIJ/adm.php 162.254.33.129/be/chop/chop/PIRATERIJ/adm.php 209.141.59.15/admin/login

1

6

0

3

1K

Fox_threatintel @banthisguy9349

over 2 years ago

#uadmin panel on hxxps://infoservice-postbank.de.141-98-10-22.cprapid.com/uadmin/adm.php

0

2

0

1

421

Fox_threatintel @banthisguy9349

over 2 years ago

Phishing on hxxp://5.230.47.12/DEPALLY/DHL.html #uadmin #phishing #framework

banthisguy9349's tweet photo. Phishing on hxxp://5.230.47.12/DEPALLY/DHL.html

#uadmin #phishing #framework https://t.co/TdsFO8bhDM

0

4

0

1

747

Fox_threatintel @banthisguy9349

over 2 years ago

hxxps://miles-more.de.141-98-10-117.cprapid.com/uadmin/adm.php #Uadmin panel discovered that is behind targetting @postbank https://t.co/hnVaztqmDs

banthisguy9349's tweet photo. hxxps://miles-more.de.141-98-10-117.cprapid.com/uadmin/adm.php
#Uadmin panel discovered that is behind targetting @postbank

https://t.co/hnVaztqmDs https://t.co/c3ShIT2sFb

1

6

0

0

612

Fox_threatintel @banthisguy9349

over 2 years ago

mein-commerz-qr-update[.de mein-commerz-qr-update[.top meine-commerz-qr-updates[.de commerz-qr-aktualisierungen[.eu commerz-qr-updates[.eu mein-commerz-qr-update[.de Phishing domains targetting @commerzbank #Uadmin panel hxxp://205.185.119.196/admin/login Hiding directories 🤣

banthisguy9349's tweet photo. mein-commerz-qr-update[.de
mein-commerz-qr-update[.top
meine-commerz-qr-updates[.de
commerz-qr-aktualisierungen[.eu
commerz-qr-updates[.eu
mein-commerz-qr-update[.de
Phishing domains targetting @commerzbank
#Uadmin panel
hxxp://205.185.119.196/admin/login

Hiding directories 🤣 https://t.co/ANGLYgGlVx

1

5

0

2

1K

Fox_threatintel @banthisguy9349

over 2 years ago

http://94.156.65.58/d/de/ #uadmin #opendir revealing almost all german banks being a target @Gi7w0rm

banthisguy9349's tweet photo. http://94.156.65.58/d/de/ #uadmin #opendir revealing almost all german banks being a target @Gi7w0rm https://t.co/IvJJnCYXYA

0

3

2

3

726

Fox_threatintel @banthisguy9349

over 2 years ago

#uadmin found targetting several branches #opendir hxxp://185.239.238.211/uadmin/adm.php

banthisguy9349's tweet photo. #uadmin found targetting several branches #opendir

hxxp://185.239.238.211/uadmin/adm.php https://t.co/AS8ZyfDstd

banthisguy9349's tweet photo. #uadmin found targetting several branches #opendir

hxxp://185.239.238.211/uadmin/adm.php https://t.co/AS8ZyfDstd

banthisguy9349's tweet photo. #uadmin found targetting several branches #opendir

hxxp://185.239.238.211/uadmin/adm.php https://t.co/AS8ZyfDstd

banthisguy9349's tweet photo. #uadmin found targetting several branches #opendir

hxxp://185.239.238.211/uadmin/adm.php https://t.co/AS8ZyfDstd

1

32

7

4

3K

Fox_threatintel @banthisguy9349

over 2 years ago

these #uadmin phishersredesigned their front-end 'processing //hack attempt failed'' 🤣🤣🤣 anyways. 91.224.92.245 is currently targetting the branch @sparkasse report has been send to: [email protected]

banthisguy9349's tweet photo. these #uadmin phishersredesigned their front-end
'processing //hack attempt failed'' 🤣🤣🤣

anyways. 91.224.92.245 is currently targetting the branch @sparkasse

report has been send to: admin@serveroffer.lt https://t.co/JGKTXFETZ4

0

6

0

1

682

Fox_threatintel @banthisguy9349

over 2 years ago

hello, could you please help me report these to abuse@veesp[.]com? #uadmin #phishingframeworks http://77.73.70.183/login http://77.73.69.79/login https://94.242.53.101/login http://37.128.207.158/login they have taken 12 down before but they seem to ignore me now.#putpressure

0

5

0

4

2K

Fox_threatintel @banthisguy9349

over 2 years ago

hxxp://45.11.186.89/login new #uadmin found related to hxxps://urlscan.io/result/c152d3b6-387b-4fdc-949e-4bf029b1bdd2/ t[.]me/srangpanel threatactor reported to @IPXOcom

1

5

0

2

793

Fox_threatintel @banthisguy9349

over 2 years ago

5.230.68.208 5.230.54.86 5.230.73.188 5.230.67.199 5.230.72.203 all have @Payconiq phishing domains attached + #uadmin framework. also .86 and .188 are opendir. the .199 also targets #ics banking system.

0

3

0

1

5K

Fox_threatintel @banthisguy9349

over 2 years ago

hxxps://api.telegram.org/bot5808854485:AAEoH8w0l-DnKOEWsRBMiMLFtyBy93MBNFQ/getme chat_id=-888047248 make sure to stay on vpn if you planning to query. api telegram bot from #uadmin threatactor. 4members in the channel. documentation: hxxps://core.telegram.org/bots/api

banthisguy9349's tweet photo. hxxps://api.telegram.org/bot5808854485:AAEoH8w0l-DnKOEWsRBMiMLFtyBy93MBNFQ/getme
chat_id=-888047248

make sure to stay on vpn if you planning to query.

api telegram bot from #uadmin threatactor. 4members in the channel.
documentation: hxxps://core.telegram.org/bots/api https://t.co/BeJ7d1iWEk

2

33

2

12

5K

Fox_threatintel @banthisguy9349

over 2 years ago

When you pickup on some strange behaviour. Some idiotic #uadmin hacker tried to #socialengineer me into giving him information. He did this by approaching me on a alt account. Stay cautious at all times. He confirmed with certain information points that he related to them.

banthisguy9349's tweet photo. When you pickup on some strange behaviour. Some idiotic #uadmin hacker tried to #socialengineer me into giving him information. He did this by approaching me on a alt account.

Stay cautious at all times.

He confirmed with certain information points that he related to them. https://t.co/XEQ6cMrTF1

banthisguy9349's tweet photo. When you pickup on some strange behaviour. Some idiotic #uadmin hacker tried to #socialengineer me into giving him information. He did this by approaching me on a alt account.

Stay cautious at all times.

He confirmed with certain information points that he related to them. https://t.co/XEQ6cMrTF1

banthisguy9349's tweet photo. When you pickup on some strange behaviour. Some idiotic #uadmin hacker tried to #socialengineer me into giving him information. He did this by approaching me on a alt account.

Stay cautious at all times.

He confirmed with certain information points that he related to them. https://t.co/XEQ6cMrTF1

banthisguy9349's tweet photo. When you pickup on some strange behaviour. Some idiotic #uadmin hacker tried to #socialengineer me into giving him information. He did this by approaching me on a alt account.

Stay cautious at all times.

He confirmed with certain information points that he related to them. https://t.co/XEQ6cMrTF1

0

16

2

1

3K

Fox_threatintel @banthisguy9349

over 2 years ago

inside joke to the #Uadmin cybercriminals. another changed config on uadmin. once again to you. you think i am a idiot?

banthisguy9349's tweet photo. inside joke to the #Uadmin cybercriminals.

another changed config on uadmin.

once again to you.

you think i am a idiot? https://t.co/njakJ9jzVr

0

2

1

0

805

Fox_threatintel @banthisguy9349

over 2 years ago

45.147.231.124/login 45.153.240.82/login 46.29.162.103/login 94.242.53.249/login 104.194.156.51/login 172.86.66.26/login 172.86.70.150/login 176.32.33.106/login #uadmin's c2's found with new query from @thehappydinoa

2

18

2

4

2K

Fox_threatintel @banthisguy9349

over 2 years ago

https://62.72.33.127/acces/login #uadmin panel targgeting https://t.co/38BLMkuVG0 ledger @bcmtodaycom

banthisguy9349's tweet photo. https://62.72.33.127/acces/login
#uadmin panel targgeting https://t.co/38BLMkuVG0 ledger @bcmtodaycom https://t.co/S2brLCjQiw

3

6

2

2

2K

Fox_threatintel @banthisguy9349

over 2 years ago

well i guess we found the maker of this panel. seems to be based on the #uadmin framework @thehappydinoa https://t.co/Grfjs3gNUE @myceliumbroker thanks for sharing the urlscan results in order for me to retrieve his alias. https://t.co/NNK9DgZ6kf < his tiktok account

banthisguy9349's tweet photo. well i guess we found the maker of this panel. seems to be based on the #uadmin framework

@thehappydinoa
https://t.co/Grfjs3gNUE

@myceliumbroker thanks for sharing the urlscan results in order for me to retrieve his alias.

https://t.co/NNK9DgZ6kf < his tiktok account https://t.co/UmbO36Af8I

Fox_threatintel @banthisguy9349

over 2 years ago

188.64.13.26/login hidden by a antibot redirect to google[.]com @thehappydinoa what you think?

banthisguy9349's tweet photo. 188.64.13.26/login hidden by a antibot redirect to google[.]com

@thehappydinoa what you think? https://t.co/HhJSQyRaLW

5

17

2

4

6K

1

14

1

7

2K

Josh Stroschein | The Cyber Yeti

over 3 years ago

#opendir #uadmin #panel #zip hxxp://179.43.141[.]100/

jstrosch's tweet photo. #opendir #uadmin #panel #zip

hxxp://179.43.141[.]100/ https://t.co/WEu2Kf13Rc

2

13

2

2

3K

over 3 years ago

2x #UAdmin #Phish #panel: hxxp://168.100.11.94/uadmin/adm.php hxxp://168.100.8.44/uadmin/adm.php Described here: https://t.co/FLErtv2yQe 3/4

1

4

0

1

851

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users