Top Tweets for #revcode
Researchers at @TrendMicro have uncovered a new #cybercriminal campaign attempting to exploit the current circumstances to trick remote workers into install #RevCode WebMonitor #RAT. #dynamicCISO #linux #girlswhocode @rneelmani @hacback17
https://t.co/TKjGl5ZjzX
@VK_Intel @guelfoweb @VirITeXplorer @Certego_IRT @matte_lodi @reecdeep @merlos1977 @luc4m @malwrhunterteam @James_inthe_box @FewAtoms @Arkbird_SOLG @58_158_177_102 @sugimu_sec @bry_campbell @Jirehlov ok looks like is the same #revcode #rat
https://t.co/kzSG791Ci6
#revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_
![James_inthe_box's tweet photo. #revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/0nPfGfcsmX](https://pbs.twimg.com/media/EP8cveZVAAACuIb.png)
#revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_
![James_inthe_box's tweet photo. #revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/0nPfGfcsmX](https://pbs.twimg.com/media/EP8cveZVAAACuIb.png)
@Arkbird_SOLG @cyberwar_15 @_jsoo_ @VK_Intel @0xffff0800 @JAMESWT_MHT @blackorbird @Timele9527 @RedDrip7 @Rmy_Reserve @shotgunner101 And cc @hasherezade on the #revcode goodness...maybe newer version.
Last year, an unknown actor distributed phishing via @wallamail, that infected Israeli victims with a crafted @ScreenConnect implant. Same actor now returns to a 2nd round via Fb:
An APK wrapped with #RevCode WebMonitor (recently covered by @briankrebs -https://t.co/RkIiPmSwsC)

@KorbenD_Intel @malwrhunterteam @FewAtoms @58_158_177_102 @h4ckak @MinhTrietPT @vupt_bka @krNeoTra @blackorbird @unpacker @mstoned7 @issuemakerslab @HONKONE_K @SeraphimDomain @anyrun_app New exe is #revcode #rat, c2 is same as earlier.
@KorbenD_Intel @malwrhunterteam @FewAtoms @58_158_177_102 @h4ckak @MinhTrietPT @vupt_bka @krNeoTra @blackorbird @unpacker @mstoned7 @issuemakerslab @HONKONE_K And #revcode #rat c2 is:
https://151.106.0[.]80/recv4.php
![James_inthe_box's tweet photo. @KorbenD_Intel @malwrhunterteam @FewAtoms @58_158_177_102 @h4ckak @MinhTrietPT @vupt_bka @krNeoTra @blackorbird @unpacker @mstoned7 @issuemakerslab @HONKONE_K And #revcode #rat c2 is:
https://151.106.0[.]80/recv4.php https://t.co/RlhL8vOgXQ](https://pbs.twimg.com/media/D7SOxmkXoAAZjRj.png)
@James_inthe_box @malwrhunterteam @dvk01uk @JAMESWT_MHT @malware_traffic @makflwana @Antelox @VK_Intel @avman1995 so we have #avemaria stealer dropping #revcode rat .. thanks @James_inthe_box !

#malspam "Samsung" drops #revcode rat from s/procw.pw/zone.exe s/procw.pw/file.exe (VBAY:2ed3f039f2479a41faff3d0af8dc651b)
c2 is tricky: google,se but..
@malwrhunterteam @dvk01uk @James_inthe_box @JAMESWT_MHT @malware_traffic @makflwana @Antelox @VK_Intel @avman1995

@James_inthe_box @neonprimetime @FewAtoms @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ #Revcode #RAT #AgentTesla #Opendir
htxp://buildentconstructions.com/Stubs/
https://t.co/lPxxlfUarI
dumped:
https://t.co/OzSPyuZso3
unmapped(upx):
https://t.co/mPnO86c5tI
unpacked:
https://t.co/L2yMcr2RQW
Actor:
[email protected]

@FewAtoms Some #agenttesla in here, but test.exe and Uncleared_Accounts&OctoberInvoice.exe are #revcode #rat c2 is:
http://mostrugged.wm01[.]to/recv3.php
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_
![James_inthe_box's tweet photo. @FewAtoms Some #agenttesla in here, but test.exe and Uncleared_Accounts&OctoberInvoice.exe are #revcode #rat c2 is:
http://mostrugged.wm01[.]to/recv3.php
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/QRODwRhMvX](https://pbs.twimg.com/media/Dq8FkWwUwAAaiYJ.jpg)
@FewAtoms Your m.exe is #revcode #rat, c2 is:
mercymorrgan.wm01[.]to
traffic snippet:
keyauth=RmliMFVPeVJnaTNUUVB5ZHw4ZTc4NWY1OGE5Y2NmNGZkZmM1OTI0OTY0ZTU4MGE0OXwyMTg4MXw1MTJ8MjA4OTg=&key=82ozMRutsEZPNU2aI97R91uy8G1D9geo&uid=7ae64ebe2fe69135ee62be48a08e4255&user=mercymorrgan&cmp=0&enc=0

A new one on me...#revcode #rat dropped via #malspam subject: "REQUEST FOR QUOTATION - HSL EnC" r00 attachment
https://t.co/UC94ItSmrq
cc @hasherezade
Last Seen Hashtags on Sotwe
เธซเธฅเธญเธเนเธขเนเธ
Seen from Thailand
เธเธฃเธฒเธเธชเน
Seen from Thailand
str8
forzahorizon5
Seen from United States
kayserieskort
Seen from Turkey
alucin
Seen from Mexico
turros #gay
Seen from Argentina
incestofamiliar
Seen from Guatemala
เธเธฅเธดเธเนเธฅเธตเธขเธซเธต
Seen from Thailand
ๆ็ดๆญ
Seen from Japan
Trends for you
Most Popular Users

Elon Musk 
@elonmusk
240.9M followers

Barack Obama 
@barackobama
119.2M followers

Donald J. Trump 
@realdonaldtrump
111.8M followers

Cristiano Ronaldo 
@cristiano
111.4M followers

Narendra Modi 
@narendramodi
107M followers

Rihanna 
@rihanna
97.9M followers

NASA 
@nasa
92.2M followers

Justin Bieber 
@justinbieber
91.1M followers

KATY PERRY 
@katyperry
88.1M followers

Taylor Swift 
@taylorswift13
82M followers

Lady Gaga 
@ladygaga
73.5M followers

Virat Kohli 
@imvkohli
70.6M followers

Kim Kardashian 
@kimkardashian
70M followers

YouTube 
@youtube
68.7M followers

Bill Gates 
@billgates
64.1M followers

Neymar Jr 
@neymarjr
63.4M followers

The Ellen Show
@theellenshow
62.4M followers

CNN 
@cnn
61.9M followers

Selena Gomez 
@selenagomez
61.2M followers

X 
@x
60.8M followers





![James_inthe_box's tweet photo. #revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/0nPfGfcsmX](https://pbs.twimg.com/media/EP8cvc9UEAAQJKz.png)
![James_inthe_box's tweet photo. #revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/0nPfGfcsmX](https://pbs.twimg.com/media/EP8cvc6U0AEOQdB.png)
![James_inthe_box's tweet photo. #revcode #rat via @Bitly at:
https://bitly[.]com/31r0api
c2: barclaysb[.]wm01[.]to
hash 8a53427e1c76b904ef0daacf7c8a6ec1 on @mal_share
cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b @cocaman @0Btemos_BHS @fumik0_ https://t.co/0nPfGfcsmX](https://pbs.twimg.com/media/EP8cvc3VAAckhcE.jpg)










