Top Tweets for #numando
![suyog41's tweet photo. Numando
101204[.]zip
f71da92106339d74b1eef0b1cc99db38
PEDIDONF101204.lnk
0879d4ade73bc83521fb8dc947cd3219
SensApi.dll
3a0ae3c552d8b3c767c502c40ff21ed0
C2
sextadll[.]b-cdn[.]net
#Numando #banker #IOC https://t.co/qWj9Ng3d1e](https://pbs.twimg.com/media/GbhGV99a4AAhYRd.jpg)
Algunas reglas Yara hacen match con el malware #Numando (origen 🇧🇷).
Dos #opendir desde link[.]storjshare[.]io (servicio de almacenamiento STORJ):
- 40 archivos .DLL: https://link.storjshare[.]io/s/jwrz2vlythzkzfp3vbqflng6epeq/sessoes/
- 40 archivos .MSI: https://link.storjshare[.]io/s/jwaqrutdbomzkrhwwqqruwocezna/eclipse/
URL decoy en: https://freitaslogistica[.]com/comerce/ (dominio registrado hace 1 mes, suplantando a Freitas Logística .com.br).
[+] https://t.co/nYqk0sVjZs + https://t.co/UFOFTe5Oyz
/ cc: @pollo290987 @johnk3r
![1ZRR4H's tweet photo. Algunas reglas Yara hacen match con el malware #Numando (origen 🇧🇷).
Dos #opendir desde link[.]storjshare[.]io (servicio de almacenamiento STORJ):
- 40 archivos .DLL: https://link.storjshare[.]io/s/jwrz2vlythzkzfp3vbqflng6epeq/sessoes/
- 40 archivos .MSI: https://link.storjshare[.]io/s/jwaqrutdbomzkrhwwqqruwocezna/eclipse/
URL decoy en: https://freitaslogistica[.]com/comerce/ (dominio registrado hace 1 mes, suplantando a Freitas Logística .com.br).
[+] https://t.co/nYqk0sVjZs + https://t.co/UFOFTe5Oyz
/ cc: @pollo290987 @johnk3r](https://pbs.twimg.com/media/GThSDrPWAAA2uQR.jpg)
![1ZRR4H's tweet photo. Algunas reglas Yara hacen match con el malware #Numando (origen 🇧🇷).
Dos #opendir desde link[.]storjshare[.]io (servicio de almacenamiento STORJ):
- 40 archivos .DLL: https://link.storjshare[.]io/s/jwrz2vlythzkzfp3vbqflng6epeq/sessoes/
- 40 archivos .MSI: https://link.storjshare[.]io/s/jwaqrutdbomzkrhwwqqruwocezna/eclipse/
URL decoy en: https://freitaslogistica[.]com/comerce/ (dominio registrado hace 1 mes, suplantando a Freitas Logística .com.br).
[+] https://t.co/nYqk0sVjZs + https://t.co/UFOFTe5Oyz
/ cc: @pollo290987 @johnk3r](https://pbs.twimg.com/media/GThRatGWUAAaJi3.jpg)
![1ZRR4H's tweet photo. Algunas reglas Yara hacen match con el malware #Numando (origen 🇧🇷).
Dos #opendir desde link[.]storjshare[.]io (servicio de almacenamiento STORJ):
- 40 archivos .DLL: https://link.storjshare[.]io/s/jwrz2vlythzkzfp3vbqflng6epeq/sessoes/
- 40 archivos .MSI: https://link.storjshare[.]io/s/jwaqrutdbomzkrhwwqqruwocezna/eclipse/
URL decoy en: https://freitaslogistica[.]com/comerce/ (dominio registrado hace 1 mes, suplantando a Freitas Logística .com.br).
[+] https://t.co/nYqk0sVjZs + https://t.co/UFOFTe5Oyz
/ cc: @pollo290987 @johnk3r](https://pbs.twimg.com/media/GThRVnOXUAE6GRD.jpg)
![1ZRR4H's tweet photo. Algunas reglas Yara hacen match con el malware #Numando (origen 🇧🇷).
Dos #opendir desde link[.]storjshare[.]io (servicio de almacenamiento STORJ):
- 40 archivos .DLL: https://link.storjshare[.]io/s/jwrz2vlythzkzfp3vbqflng6epeq/sessoes/
- 40 archivos .MSI: https://link.storjshare[.]io/s/jwaqrutdbomzkrhwwqqruwocezna/eclipse/
URL decoy en: https://freitaslogistica[.]com/comerce/ (dominio registrado hace 1 mes, suplantando a Freitas Logística .com.br).
[+] https://t.co/nYqk0sVjZs + https://t.co/UFOFTe5Oyz
/ cc: @pollo290987 @johnk3r](https://pbs.twimg.com/media/GThRVnHWkAAqY3N.jpg)
![johnk3r's tweet photo. #trojan #banker maybe #Numando
Low Detection VT
"Dear Customer, your chat configuration has been successfully initialized... follow the instructions of our security analyst."
C2:
185.228.72[.]101[:]55888
Persistence:
MultiMoney: AppData\Roaming\Manual\PorfileMgr.exe https://t.co/1kLUOe7BD0](https://pbs.twimg.com/media/GNuVOT2WkAAj3mR.jpg)
![johnk3r's tweet photo. #trojan #banker maybe #Numando
Low Detection VT
"Dear Customer, your chat configuration has been successfully initialized... follow the instructions of our security analyst."
C2:
185.228.72[.]101[:]55888
Persistence:
MultiMoney: AppData\Roaming\Manual\PorfileMgr.exe https://t.co/1kLUOe7BD0](https://pbs.twimg.com/media/GNuUa6WXoAAk2xj.png)
Analizando el troyano bancario brasileño #Numando y ampliando la información compartida por @ESET @ESET_ES https://t.co/0MbLGT5l1O #reversing #IDAPro @InnotecSecurity
It's time for Triage Thursday!
Shorter blogpost this week covering new detections/configuration extractors for #SquirrelWaffle, #Webmonitor and #Numando; plus detection updates for #Qakbot and #Raccoon
Check it out here! 👇
https://t.co/glUT3RYbHT
#Numando: a #banking Trojan Targeting #Brazil Abuses #YouTube for Spreading
https://t.co/sF3DHLBjJD
#fintech #FinServ #infosec #security #cybersecurity #databreach #cyberattack #cybercrime #datatheft #dataprivacy #hacker #malware #trojan #DDoS #CISO #ransomware #tech #techno
#ThreatProtection #Numando #banking #malware targets Latin America, read more: https://t.co/hg561yrFLz
Don't miss the latest in ESET #cybersecurity news with @TonyAtESET!
➡️ #Numando banking trojan targets Brazil
➡️ What is the #cyberattack surface?
➡️ #WhatsApp to roll out end-to-end encrypted backups
Learn more now at https://t.co/RWNNi2KdHC
Before concluding our series, there is one more LATAM banking #trojan that deserves a closer look. Geographically, it focuses almost exclusively on Brazil with rare campaigns in Mexico and Spain. Meet #Numando. 😉 #cybersecurity #safertechnology
#Hacking #Numando #Banking #Trojan #Malware #Vulnerability #CyberCrime #CyberAttack #CyberSecurity
Numando, a new banking Trojan that abuses YouTube, Pastebin, and other public platforms as C2 infrastructure and to spread.
https://t.co/63El5dOrCR
@ESETresearch @esetitalia @ESETUK @ESET #Numando, a new #banking #Trojan that abuses YouTube for remote configuration
https://t.co/RxlTWwBfDL
#securityaffairs #hacking #malware
I have shared some samples of #Numando in Bazaar
https://t.co/8JEnKruGhH
cc @h2jazi @James_inthe_box @JAMESWT_MHT @_jsoo_ @BushidoToken @JusticeRage @c3rb3ru5d3d53c @DrunkBinary
Numando - a Latin American banking trojan written in Delphi and targets mainly Brazil with rare campaigns in Mexico and Spain https://t.co/wDlOP6P7HP
#Numando: Count once, code twice
https://t.co/aIVgQx6Wgo @welivesecurity
#DataSecurity #Privacy #100DaysOfCode #Security #SpyWare
#MachineLearning #Phishing #Cloud #Ransomware #Cybersecurity
#Infosec #CyberAttack #DataProtection #Malware #Hacking
Esp. for our South American customers:
This banking #Trojan abuses #YouTube to manage remote settings https://t.co/9ObSPq8O3C via @ZDNet & @SecurityCharlie #SouthAmerica #BankingIT #Spam #Phishing #Numando
#Numando is not as active as the other LATAM banking trojans, but it is unique in its way of payload obfuscation. It utilizes a decoy ZIP archive with an encrypted URL in the ZIP file comment and hides the payload in overlay of BMP images. 2/3
#ESETresearch continues its series about Latin American banking trojans, this time featuring #Numando, a malware family targeting almost exclusively Brazil 🇧🇷 since at least 2018. @RoboSuman https://t.co/hl2MVTrdSI 1/3
Last Seen Hashtags on Sotwe
媚黑女王
Seen from United States
足控
Seen from United States
Kiranrathore
Seen from Netherlands
vgk
Seen from Philippines
سكس_خليجي
Seen from United States
2017Cohort
Seen from United Kingdom
ifşa yazışma
Seen from Turkey
momson #porn
Seen from Canada
แนวครอบครัวแม่ลูก
Seen from Thailand
bnwo
Seen from Germany
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
240.9M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Cristiano Ronaldo
@cristiano
111.4M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
97.9M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.1M followers
KATY PERRY
@katyperry
88.1M followers
Taylor Swift
@taylorswift13
82M followers
Lady Gaga
@ladygaga
73.5M followers
Virat Kohli
@imvkohli
70.6M followers
Kim Kardashian
@kimkardashian
70M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.1M followers
Neymar Jr
@neymarjr
63.4M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.9M followers
Selena Gomez
@selenagomez
61.2M followers
X
@x
60.8M followers