Top Tweets for #URLhaus
hxxp://94.154.32/.238/s.ps1
hxxp://newstan/.online/asset/update.dat
It looks kind of like this👇
https://t.co/VTLE3IC0rf
All files are hosted on #urlhaus (except for the “bin/dat" file) and on #reversinglabs/VT; the links and hashes are provided in the post below.
everyone should block the page. Just have a look at the #urlhaus entry here.
https://t.co/3QCdiJ9xJg
"keythereum-utils" contains obfuscated code that downloads & runs a second stage payload, which is a heavily obfuscated batch script.
The output is made in such a way that you can copy&paste the result into @abuse_ch #urlhaus.
Unfortunately my license expires soon but maybe someone wants to develop it further.
Happy Hunting
@banthisguy9349 @NDA0E @RacWatchin8872 @DaveLikesMalwre
Top Malware Hosting Networks
#urlhaus
Are we “famous” now? 😂🤣
cc: @DaveLikesMalwre @NDA0E @Ryan_Riordz @banthisguy9349 @JAMESWT_MHT
#URLhaus #abusech #MalwareSites #ThreatIntel
https://t.co/BPi1aytXbp
@500mk500
#supershell #c2 server - collected via @censysio - not all are reported in #urlhaus
https://t.co/VDQLv2tPxk
cc: @RacWatchin8872 @NDA0E @DaveLikesMalwre @banthisguy9349 @tosscoinwitcher (🔨) - have fun^^
🤖Another day... more Mirai 🧨
Reverse lookups resolved 2 domains used for distribution
via DNSlytics
91[.]200[.]103[.]117 -> 2x Domains 👇
🌐Domains:
hxxp[://]gowogle[.]xyz/
hxxp[://]kreuzfahrt-radar[.]de/
#Reported #URLHaus
CC: @RacWatchin8872 @banthisguy9349 @500mk500 @NDA0E @tolisec
![DaveLikesMalwre's tweet photo. 🤖Another day... more Mirai 🧨
Reverse lookups resolved 2 domains used for distribution
via DNSlytics
91[.]200[.]103[.]117 -> 2x Domains 👇
🌐Domains:
hxxp[://]gowogle[.]xyz/
hxxp[://]kreuzfahrt-radar[.]de/
#Reported #URLHaus
CC: @RacWatchin8872 @banthisguy9349 @500mk500 @NDA0E @tolisec](https://pbs.twimg.com/media/GZOLfWcW0AAI_2S.png)
NetResearch doing NetResearch things.... 🙄
🔫BulletProof ASN - AS215240
Some Mirai finds reported to #URLHaus
Thanks to @tolisec Report in #urlhaus https://t.co/V3Zbk59zOy
I found the corresponding domain 💣.
The domain is fairly new and registered with fe[.ru.
Have a nice weekend Mr. TA 👋.
cc: @banthisguy9349 @RacWatchin8872
#mirai
StealC 🔝 tops the charts associated with the most malware sites (4,088 samples) this May. But can you guess which malware family saw an eye watering 6,975% increase? 😱
URLHaus | Malware sites:
👉 https://t.co/fKF6IVVsev
#URLhaus #abusech #MalwareSites #ThreatIntel
🎉 NEW! Access @abuse_ch URLhaus data (BETA) via Spamhaus Intelligence API. Gain valuable malware-specific intelligence, in addition to rich and expansive IP and domain reputation data.
👉 Learn more and sign up here: https://t.co/bofmuZe8o8
#URLHaus #MaliciousURLData #API
RiseProStealer ⏫ by +63%, associated with the most malware sites (4744 samples) in January's Malware Report. But this stealer isn’t alone.
Find out which malware topped the charts with a +243% ⏫
Full report 👉 https://t.co/ZgP10ieX08
#Stealers #MalwareTrends #URLHaus
📌Open #malware feeds may pose a threat to users and organizations
In recent months, we've come across a small loader which we named #Hausbomber
It is written in .NET, ranging from 4 to 9 Kb in size, undergoes periodic modifications.
It actively scans the free #UrlHaus #Abuse_ch feed, retrieving and executing any malware it encounters.
This sample has not been uploaded to VirusTotal up to this day⤵️
https://t.co/yXVKXdxG1P
Here are three different modifications in three months⤵️
https://t.co/j2p65kPXHM
Explore #Hausbomber #loader with #ANYRUN🛡️
@abuse_ch the account that I use to share #Gootloader download URLs got banned from #URLhaus for no reason. I try to share IOCs on as many platforms possible, for defenders to block this malware, before it even hits their machines.
StealC 🔝 tops the charts for ⬆️ (+84.72%) in samples shared in October’s Malware report. Despite a significant ⬇️ RedlineStealer (-48.92%) holds on to #1 for samples shared (2,346).
👉Find the full report here:
https://t.co/fT4HI79dgP
#Malware #URLHaus #ThreatIntelligence
🚨SEPTEMBER MALWARE REPORT | 206.1% ⏫ in IOCs shared. With a 334.12% ⏫, Smokeloader malware 👾 was associated with the most reported sites. Big shout out to @tolisec 🥇 #1 contributor on #URLHaus.
Read the report here: 👇
https://t.co/K0YJRAy8se
#Malware #SharingIsCaring
This July we saw the return of the stealers📈 , with RedlineStealer and Amadey responsible for nearly 50% of ALL malware sites shared on URLhaus.
👉 Read the full report here: https://t.co/HkjS7gb8A9
#Malware #URLHaus #ThreatIntelligence
Last Seen Hashtags on Sotwe
CineVelostigmat1inchF1_5
Seen from United States
แอบเย็ด
Seen from Thailand
sloppy kiss
Seen from Singapore
露出
Seen from United States
pogingbagets
Seen from Philippines
Teenager()*
Seen from Germany
momsonn
Seen from Netherlands
เกย์รับ
Seen from Thailand
AmansieCentralDistrict
Seen from United States
şişlitravesti
Seen from Spain
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
241.6M followers
Barack Obama
@barackobama
119M followers
Cristiano Ronaldo
@cristiano
114.1M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107.2M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.4M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
89.8M followers
Taylor Swift
@taylorswift13
83.8M followers
Lady Gaga
@ladygaga
75.2M followers
Virat Kohli
@imvkohli
73M followers
Kim Kardashian
@kimkardashian
70.8M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66M followers
Bill Gates
@billgates
65M followers
Selena Gomez
@selenagomez
62.9M followers
The Ellen Show
@theellenshow
62.3M followers
CNN
@cnn
61.8M followers
X
@x
60.7M followers