#destover - Twitter Hashtag

about 3 years ago

"AI-based Digital Evidence Enhancement Technology for Threat Intelligence Analysis" published by SandsLab. #Destover, #Slides, #CTI, #OSINT, #LAZARUS https://t.co/g9Tn2k99iL

0

5

3

2

600

Arkbird @Arkbird_SOLG

over 5 years ago

Yep, looks like #Destover of Lazarus. Sample : https://t.co/JaDRuWBndK cc: @ShadowChasing1 @cyberwar_15

Jazi @h2jazi

over 5 years ago

#Lazarus #APT 5c2f339362d0cd8e5a8e3105c9c56971087bea2701ea3b7324771b0ea2c26c6c http://mail.sisnet[.]co[.]kr/jsp/user/sms/sms_recv.jsp

1

50

13

1

0

27

9

1

0

Intezer @IntezerAISOC

over 6 years ago

A new-old #Destover sample (used by Lazarus group 🇰🇵) popped up a few days ago in VT https://t.co/gBQkibOqlE 450f1690c8d680c012ce184e63d714f9a1bf9f4c9707fff1b4d0b8c6640a5e23

IntezerAISOC's tweet photo. A new-old #Destover sample (used by Lazarus group 🇰🇵) popped up a few days ago in VT
https://t.co/gBQkibOqlE
450f1690c8d680c012ce184e63d714f9a1bf9f4c9707fff1b4d0b8c6640a5e23 https://t.co/nwxD48mKX1

2

49

23

1

0

Menlo Security @menlosecurity

over 8 years ago

North Korean APT #cyber threat actor, #HiddenCobra (aka #LazarusGroup) likely behind #GhostSecret #phishing operation as researchers have found it involves code & capabilities similar to campaigns like #Bankshot & #Destover @McAfee @BBB1216BBB @scmagazine https://t.co/ucVAILKhlx

menlosecurity's tweet photo. North Korean APT #cyber threat actor, #HiddenCobra (aka #LazarusGroup) likely behind #GhostSecret #phishing operation as researchers have found it involves code & capabilities similar to campaigns like #Bankshot & #Destover @McAfee @BBB1216BBB @scmagazine https://t.co/ucVAILKhlx https://t.co/Wzo4QNOCp5

0

1

2

0

Brent Muir @bsmuir

over 8 years ago

"Analysis of the code & PE rich header indicates... #Bankshot, #Proxysvc & #Destover-like implant are distinct families, but also contain overlapping code & functionality with... Hidden Cobra" - @mcafee_labs. #infosec #Cybersecurit…https://t.co/GlpkgopFay https://t.co/DHMggsL3kb

0

2

1

0

Digital Guardian @DigitalGuardian

almost 9 years ago

New research via @recordedfuture: #LazarusGroup APT targeted South Korean #cryptocurrency exchanges, shared code w/ #Destover: https://t.co/UWlPI0bOu7

DigitalGuardian's tweet photo. New research via @recordedfuture: #LazarusGroup APT targeted South Korean #cryptocurrency exchanges, shared code w/ #Destover: https://t.co/UWlPI0bOu7 https://t.co/LelogF3zDD

0

2

0

J. A. Guerrero-Saade

@juanandres_gs

almost 9 years ago

The payload (versions for both 32 and 64bit included) most closely resembles the #Destover infostealer at a level of codesimilarity but does not include the destructive (killdisk) components.

1

2

0

J. A. Guerrero-Saade

@juanandres_gs

almost 9 years ago

Happy to finally share some new research on #NorthKorean attacks against #SouthKorean #cryptocurrency exchanges and use of the #Olympics as a lure to deliver #Destover https://t.co/AGIycqhs23

4

101

73

0