#vjworm - Twitter Hashtag

almost 3 years ago

https://t.co/1vKiGgs5aY 6b23454a6815252bedf0f28144ca249862be40f64240089a0d20a2023e52800d.html https://t.co/j6uWyfZOsn #vjworm #trojan #malware #infosec @anyrun_app

0

2

0

63

Petrovic @petrovic082

almost 4 years ago

#vjworm _185.157.162.75 https://t.co/xyvRDsxCPV

0

5

3

0

Petrovic @petrovic082

about 4 years ago

#vjworm https://t.co/oNZilTVR65

0

3

1

0

Petrovic @petrovic082

about 4 years ago

#vjworm https://t.co/PbgAdbhOEs

0

3

1

0

Ankit Anubhav

@ankit_anubhav

over 4 years ago

/ec2-3-235-29-66.compute-1.amazonaws.com/ #vjworm ( related to #AHKLoader campaign seen by @morphisec in past ) is hosting several stuff of its attack cycle on EC2 AWS. Of course AWS URL has 0/93 link detection and people keep AWS in whitelists. https://t.co/Kl9ib5jTjs

ankit_anubhav's tweet photo. /ec2-3-235-29-66.compute-1.amazonaws.com/

#vjworm ( related to #AHKLoader campaign seen by @morphisec in past ) is hosting several stuff of its attack cycle on EC2 AWS.

Of course AWS URL has 0/93 link detection and people keep AWS in whitelists.

https://t.co/Kl9ib5jTjs https://t.co/XRQxiXpgCt

0

6

0

Petrovic @petrovic082

over 4 years ago

#vjworm https://t.co/dRyI2mY8ru https://t.co/RlJQDuEc8D

0

2

1

0

reecDeep @reecdeep

over 4 years ago

🐀#vjworm #rat #Malware aka Vengeance Justice Worm being spreaded via #malspam RUN: https://t.co/X36ATyMoM4 🔥c2: hxxp://aqhariabdullah763.ddns.net:3462 hxxp://javaslinns.duia.ro:62104 #infosec #cybersecurity #dataprivacy

reecdeep's tweet photo. 🐀#vjworm #rat #Malware aka Vengeance Justice Worm being spreaded via #malspam

RUN: https://t.co/X36ATyMoM4

🔥c2:
hxxp://aqhariabdullah763.ddns.net:3462
hxxp://javaslinns.duia.ro:62104

#infosec #cybersecurity #dataprivacy https://t.co/CP7EVaHDwN

0

13

5

1

0

Petrovic @petrovic082

over 4 years ago

#vjworm https://t.co/7R8P9JYKkc

0

2

1

0

ExecuteMalware @executemalware

almost 5 years ago

I also saw an email with a .zip file attachment (containing a .js file) which turned out to be #vjw0rm #vjworm . This is another first for me. Pretty interesting. Here are the IOCs: https://t.co/CgzmPG5Pue

2

37

14

2

0

Petrovic @petrovic082

about 5 years ago

#vjworm https://t.co/bLsFEdos2r

0

1

0

Petrovic @petrovic082

about 5 years ago

#vjworm https://t.co/Ggl3dKL53M

1

4

0

Racco42 @Racco42

about 5 years ago

#malspam "RE: AW: Our New Order/Enquiry No.00127" brings a .js matryoskha - one #vjworm inside the other C2s: hxxp://autojreiella.duia.ro:62104/ (79.134.225.10) hxxp://202.55.132.213:1993/ https://t.co/XMMBr0fnjQ

1

6

4

1

0

Suspicious Link @killamjr

about 5 years ago

#malware #vjworm #opendir hXXp://185.81.157.24/9093/ https://t.co/Dzqr3S1by0 c2 185.81.157.187:9093

0

1

0

Arnold Osipov @osipov_ar

about 5 years ago

New #AutoHotKey (#AHK) loader delivering RATs #AsyncRAT #RevengeRAT #VjW0rm (#VjWorm) https://t.co/GIY7GMplSx

0

6

4

0

Pistus @jorgemieres

about 6 years ago

Potential variant of #VjWorm (#VjW0rm) operating via corona2020.ddnsfree.]com domain. Same operated by actor #v_B01 few months ago🔃 TGT:#France ☣️e17a7fa0b35f056869688c4682b93ab1 #VBS ☣️693b22da4a1afed9c56dcec50facf2e5 ➡️port:7777 & 5051 ➡️url:/Vre #Malware #Worm #coronavirus

0

2

3

0