#xtrat - Twitter Hashtag

about 8 years ago

Another one of those multi-dropper #malspam pdf -> embedded rtf -> exe hosted at: meta-mim[.]in/comment https://t.co/vp5EqY41k4 #lokibot c2 is http://life-is-beautiful[.]in/inc/Panel/five/fre.php https://t.co/oRSiuts3Wh #formbook #hawkeye #xtrat

James_inthe_box's tweet photo. Another one of those multi-dropper #malspam pdf -> embedded rtf -> exe hosted at:

meta-mim[.]in/comment

https://t.co/vp5EqY41k4

#lokibot c2 is http://life-is-beautiful[.]in/inc/Panel/five/fre.php

https://t.co/oRSiuts3Wh

#formbook #hawkeye #xtrat https://t.co/pv7ou89DGP

3

14

10

0

ExecuteMalware @executemalware

about 8 years ago

#malspam PDF attachment leads to everything but the kitchen sink: #xtrat #adwind #hawkeye #keylogger #lokibot #formbook https://t.co/wWtDylRwVO

executemalware's tweet photo. #malspam PDF attachment leads to everything but the kitchen sink:

#xtrat #adwind #hawkeye #keylogger #lokibot #formbook

https://t.co/wWtDylRwVO https://t.co/qxYOfiHZFI

1

5

3

0

James @James_inthe_box

about 8 years ago

Another dropper, this time it's rtf -> #lokibot #xtrat #hawkeye #keylogger #adwind https://t.co/uilUlGES2H https://t.co/Ki8on5i7sB li1i.exe is the initial dropper.

0

6

3

1

0

TrendAI @trendaisecurity

over 8 years ago

#XTRAT and #DUNIHI backdoors were found bundled with #Adwind in separate #spam deliveries. Details in this report: https://t.co/IhRjya3v8I

trendaisecurity's tweet photo. #XTRAT and #DUNIHI backdoors were found bundled with #Adwind in separate #spam deliveries. Details in this report: https://t.co/IhRjya3v8I https://t.co/1zyvKUZhoz

0

4

2

0

TrendAI™ Research

@trendai_RSRCH

over 8 years ago

ICYMI: A spam campaign was discovered delivering different malware in a bundle, including #Adwind, #XTRAT, and #Loki. Mitigation techniques: https://t.co/PHr1OpE4EF

trendai_RSRCH's tweet photo. ICYMI: A spam campaign was discovered delivering different malware in a bundle, including #Adwind, #XTRAT, and #Loki. Mitigation techniques: https://t.co/PHr1OpE4EF https://t.co/ZuP5DdlV8R

0

6

1

0

TrendAI™ Research

@trendai_RSRCH

over 8 years ago

#XTRAT and #DUNIHI backdoors were found bundled with #Adwind in separate #spam deliveries. Details in this report: https://t.co/PHr1OpE4EF

0

6

1

0

TrendAI™ Research

@trendai_RSRCH

over 8 years ago

ICYMI: #Adwind was found bundled with #XTRAT and Loki in #spam mails. Analysis: https://t.co/PHr1OpE4EF

0

3

6

0

Just a Sales Rep @pfpt_johnhaden

over 8 years ago

Security experts from @TrendMicro have spotted spam campaigns delivering #XTRAT & #DUNIHI Backdoors & #Loki #malware bundled with the #Adwind RAT. https://t.co/L533GJbh8C via @securityaffairs

pfpt_johnhaden's tweet photo. Security experts from @TrendMicro have spotted spam campaigns delivering #XTRAT & #DUNIHI Backdoors & #Loki #malware bundled with the #Adwind RAT. https://t.co/L533GJbh8C via @securityaffairs https://t.co/GCmRJslpOJ

0

2

0

TrendAI™ Research

@trendai_RSRCH

over 8 years ago

A #spam campaign was discovered delivering different #malware in a bundle, including #Adwind, #XTRAT, and #Loki. Mitigation techniques: https://t.co/PHr1OpE4EF

0

4

0

TrendAI™ Research

@trendai_RSRCH

over 8 years ago

A spam campaign was discovered delivering different malware in a bundle, including #Adwind, #XTRAT, and #Loki. Mitigation techniques: https://t.co/PHr1OpE4EF

trendai_RSRCH's tweet photo. A spam campaign was discovered delivering different malware in a bundle, including #Adwind, #XTRAT, and #Loki. Mitigation techniques: https://t.co/PHr1OpE4EF https://t.co/gJFXuCWeA4

0

12

10

0

SwitHak (👁)

@SwitHak

over 8 years ago

#XTRAT and #DUNIHI #Backdoors Bundled with #Adwind in Spam Mails by @TrendLabs ( you don't have JRE, no problem, the malware installs for you ☡) ↘ https://t.co/JlEDJWAEvz

0

2

0

James @James_inthe_box

over 8 years ago

rtf file drops: http://steamer10theatre[.]org/wp-admin/js/mcl.exe which in turn drops...well just about everything: https://t.co/hgOVW1jMbQ #opendir #adwind #lokibot #xtrat c2 http://meta-mim[.]in/wp-includes/fotos/Panel/five/ cc @benkow_ @Xylit0l @Anti_Expl0it @h3x2b