#apt44 - Twitter Hashtag

2 months ago

CERT-UA has detected new tactics employed by the Russian hacking group #Sandworm. The actors disguise malware as legitimate antivirus software, bundle threats inside pirated applications, and manipulate users via #ClickFix. https://t.co/XGTOW0zlVW #APT44 #cyberthreats

SSSCIP's tweet photo. CERT-UA has detected new tactics employed by the Russian hacking group #Sandworm. The actors disguise malware as legitimate antivirus software, bundle threats inside pirated applications, and manipulate users via #ClickFix.
https://t.co/XGTOW0zlVW

#APT44 #cyberthreats https://t.co/E0lO8vxchk

0

12

7

2

899

CERT-UA @_CERT_UA

2 months ago

UAC-0145 (subcluster of UAC-0002, aka #Sandworm/#APT44): fake "antivirus" spread via Signal, #ClickFix, Android backdoor. Details (UA only): https://t.co/bXb8Vw5iA4

_CERT_UA's tweet photo. UAC-0145 (subcluster of UAC-0002, aka #Sandworm/#APT44): fake "antivirus" spread via Signal, #ClickFix, Android backdoor.
Details (UA only): https://t.co/bXb8Vw5iA4 https://t.co/CzsGcEkZ2Y

2

43

14

11

3K

Aaron Jornet

@RexorVc0

5 months ago

#APT #APT44 #Sandworm #VoodooBear #SSH #TOR #threat #malware 📍🇷🇺 💥🇺🇦🇪🇺🌍 ⛓️ #Phishing > ZIP > #LNK (PDF decoy) > PS exec > Download next stage > Execute payloads (EXEs) > Persistence > Self-delete > SSH config + TOR > #C2 communication > Remote control 🔗360 Threat intel: https://t.co/g4j8FcCD2X

RexorVc0's tweet photo. #APT #APT44 #Sandworm #VoodooBear #SSH #TOR #threat #malware

📍🇷🇺
💥🇺🇦🇪🇺🌍

⛓️ #Phishing > ZIP > #LNK (PDF decoy) > PS exec > Download next stage > Execute payloads (EXEs) > Persistence > Self-delete > SSH config + TOR > #C2 communication > Remote control

🔗360 Threat intel: https://t.co/g4j8FcCD2X

3

63

26

44

6K

Aaron Jornet

@RexorVc0

6 months ago

#APT #APT44 #Sandworm #VoodooBear #backdoor #threat #malware 📍🇷🇺 💥🇺🇦🇪🇺🌍 ⛓️ Social Engineering + #Telegram distribution > ISO (Fake MS office) > Deploy modules (#Tambur|#Kalambur|#DemiMur) > Task Persistence > #SSH reverse tunnel | TOR #C2 > RDP takeover > #C2 + exfiltration ��360 Threat intel: https://t.co/VywJW4FhBS

RexorVc0's tweet photo. #APT #APT44 #Sandworm #VoodooBear #backdoor #threat #malware

📍🇷🇺
💥🇺🇦🇪🇺🌍

⛓️ Social Engineering + #Telegram distribution > ISO (Fake MS office) > Deploy modules (#Tambur|#Kalambur|#DemiMur) > Task Persistence > #SSH reverse tunnel | TOR #C2 > RDP takeover > #C2 + exfiltration

🔗360 Threat intel: https://t.co/VywJW4FhBS

3

75

18

34

6K

Hackread.com @HackRead

8 months ago

📢⚠️🚫 Poland blocks wiper malware attack from Russian #APT44 on power and heating plants, stopping major energy disruption. https://t.co/tXBZwvNuZK #Cybersecurity #Malware #Russia #Poland #PowerGrid

0

12

4

1

911

Mr.Rabbit

@01ra66it

9 months ago

Sandworm（APT44）はゼロデイ依存から転換し、設定ミスのあるエッジデバイス（VPN/ルータ等）を標的に侵入を図る戦術へシフト。重要インフラ向けの設定監査とMFA適用が鍵。#APT44 #Sandworm #Misconfig https://t.co/tGQJXi7gus

0

3

1

2

496

Hackread.com @HackRead

9 months ago

🌐 🛡️ Russian state-sponsored hackers are moving away from security vulnerabilities and breaking into critical infrastructure through misconfigured devices, warns Amazon Threat Intelligence. ⚠️ 🏭 🔍 Read: https://t.co/ACHOGm3tU8 #CyberSecurity #Russia #Sandworm #APT44 #Amazon

0

8

2

1

1K

Mr.Rabbit

@01ra66it

9 months ago

Sandworm（APT44）はロシアGRU（参謀本部情報総局）系APT。電力・エネルギーなど重要インフラを主標的に、破壊と諜報を両立する国家サイバー部隊。NotPetyaやIndustroyerの背後勢力。#Sandworm #APT44 #GRU

0

2

1

0

513

CySecurity News @EHackerNews

10 months ago

Russian Sandworm Hackers Deploy New Data-Wipers Against Ukraine’s Government and Grain Sector https://t.co/UFZ3Yq2QF3 #APT44 #CyberAttacks #CyberHackers

EHackerNews's tweet photo. Russian Sandworm Hackers Deploy New Data-Wipers Against Ukraine’s Government and Grain Sector https://t.co/UFZ3Yq2QF3 #APT44 #CyberAttacks #CyberHackers https://t.co/EdB3luPeIi

0

1

2

0

740

zhassulan zhussupov @cocomelonckz

11 months ago

https://t.co/utQmB14rSX my talk from MCTTP 2025 #research #hacking #osint #apt #cybercrime #threatintel #threathunting #intelligence #apt28 #apt44 #apt33 #apt10

0

5

0

1

858

Musawar H Tanoli @MusawarYDF

about 1 year ago

Malware like the #WhiteCat Log Cleaner used by #APT44 in attacks on telecommunication providers and #AcidPour, a purported successor to the AcidRain wiper used in attacks against #Telecom provider #Viasat in February 2022. #UkraineWar

MusawarYDF's tweet photo. Malware like the #WhiteCat Log Cleaner used by #APT44 in attacks on telecommunication providers and #AcidPour, a purported successor to the AcidRain wiper used in attacks against #Telecom provider #Viasat in February 2022. #UkraineWar https://t.co/59p9oCbyBq

0

6

1

0

6K

AttackIQ @AttackIQ

over 1 year ago

No phishing. No ransom note. Just destruction. That’s Sandworm. Test your defenses against APT44’s real-world tactics—HermeticWiper, PowerShell-loaded JPEGs & more. ⚡ New Sandworm Flex Package → agentless, on demand. 👉 https://t.co/6szbfP72LY #APT44 #FlexWithAttackIQ #CTEM

AttackIQ's tweet photo. No phishing. No ransom note. Just destruction. That’s Sandworm.

Test your defenses against APT44’s real-world tactics—HermeticWiper, PowerShell-loaded JPEGs & more.

⚡ New Sandworm Flex Package → agentless, on demand.

👉 https://t.co/6szbfP72LY

#APT44 #FlexWithAttackIQ #CTEM https://t.co/ZnVEkpyj7A

0

1

0

1

180

SOC Prime @SOC_Prime

over 1 year ago

The russian-backed Seashell Blizzard aka #APT44 or #Sandworm is behind a stealthy “BadPilot” campaign focused on gaining persistent network access. Detect adversary activity targeting critical sectors with #Sigma rules from SOC Prime Platform. https://t.co/l7GQjxF31p

0

8

0

1

239

Cyber_OSINT @Cyber_O51NT

over 1 year ago

AttackIQ has released an assessment template to help organizations validate security controls against the sophisticated Russian adversary Seashell Blizzard, which has targeted critical sectors globally since 2009. #CyberSecurity #APT44 https://t.co/wiNw2bW4Rg

0

9

3

2

851

Secure Blink

@secure_blink

over 1 year ago

🚨BREAKING: Russian state hackers (APT44’s "Seashell Blizzard") are INSIDE critical infrastructure NOW. . Details: https://t.co/4JPLj4czrU #APT44 #Sandworm #Russia #Vulnerability #ZeroTrust #Hacking #Threatfeed #SecureBlink

secure_blink's tweet photo. 🚨BREAKING: Russian state hackers (APT44’s "Seashell Blizzard") are INSIDE critical infrastructure NOW.
.
Details: https://t.co/4JPLj4czrU

#APT44 #Sandworm #Russia #Vulnerability #ZeroTrust #Hacking #Threatfeed #SecureBlink https://t.co/UNq3PHRqAu

0

3

2

0

147

Cyber_OSINT @Cyber_O51NT

over 1 year ago

EclecticIQ reports that Sandworm APT is targeting Ukrainian users with Trojanized Microsoft KMS tools, deploying BACKORDER to install Dark Crystal RAT for cyber espionage, likely since late 2023. #CyberSecurity #APT44 https://t.co/xiyiOoGqQ2

0

7

3

2

712

Spy Collection @SpyCollection1

over 1 year ago

New video covering a CNA/cyber warfare operation of Russian GRU as part of the invasion of Ukraine in Feb. 2022. https://t.co/PsKJThvzCN #SANDWORM #HermeticWiper #APT44 #GRU #IRIDIUM #Russia #Ukraine

0

2

868

S3N4T0R @S3N4T0R_0X0

almost 2 years ago

This is a simulation of attack by (#VoodooBear) #APT44 group targeting entities in Eastern Europe the attack campaign was active as early as mid-2022, The attack chain starts with #backdoor which is a DLL targets both 32-bit and 64-bit Windows environments,https://t.co/4ZjDI29nL5

S3N4T0R_0X0's tweet photo. This is a simulation of attack by (#VoodooBear) #APT44 group targeting entities in Eastern Europe the attack campaign was active as early as mid-2022, The attack chain starts with #backdoor which is a DLL targets both 32-bit and 64-bit Windows environments,https://t.co/4ZjDI29nL5 https://t.co/eVHdWwjtdQ

0

4

0

1

295

Dark Web Intelligence

@DailyDarkWeb

over 2 years ago

APT44: Unearthing Sandworm - by @Mandiant "APT44 (commonly known as Sandworm, FROZENBARENTS, and Seashell Blizzard) is a Russian Federation backed threat group attributed by multiple governments..." https://t.co/Kxv82mU6uA #cybersecurity #infosec #apt44