Call for Beta Testers
We’re looking for beta testers for our new CTI Maltego Transforms.
If you have a Maltego Professional license and want early access in exchange for feedback, reply here or DM us.
#Maltego#CTI#ThreatIntelligence#DFIR
We’re opening beta access to our new CTI @MaltegoHQ Transforms.
Built to help analysts pivot through high-confidence threat intelligence directly inside Maltego.
If you have a Maltego Professional license and are interested,reply here or DM us.
#ThreatIntelligence#CTI#DFIR
Join me at @BSidesVancouver on May 26 for my workshop "Precision #ThreatHunting: Unveiling Adversary Infrastructure using Free and Open Source Tools," designed to teach participants techniques for discovering and analyzing adversary infrastructure. Only 6 seats left! #OSINT
Captured a screenshot of a live #panel of the #Ermac 3.0 #Android#bot builder. Some interesting functionality here:
✅ #C2 connection URL
✅ Backend encryption key
✅ Crypt the #apk
✅ Emulator blocking
✅ Custom icon
✅ Build with a clean app
#malware
A few days ago, #Amadey owner and I did a brief interview.
We talk about past, present and future of the infamous #Amadey Loader, one of the biggest products in the MaaS environment. Something worth a read.
Please find it at:
https://t.co/D3Md7vgUim
Don't miss the chance to speak at BSides Vancouver Island! The CFP is closing this week, we want to hear from you. Apply now at https://t.co/E0eZ3LhPKN and get ready to rock the stage!
Some additional #IcedID#malware IPs from a related .pdf campaign:
80.77.23[.]154
80.77.23[.]155
80.77.23[.]170
80.77.23[.]176
80.77.23[.]64
91.240.202[.]190
91.240.202[.]195
pdf name: Document_[mm_dd]_[number].pdf
Did some hunting based on this excellent share by @0xperator and was able to find another active #Rhadamanthys#Stealer#c2 panel:
hxxp://185.228.234[.]189:443/admin/console/index.html
cc @ViriBack@0xrb