RedPacket Security - InfoSec News & Tutorials

Malware Analysis – chaos – fa06e6aadef2365052156f12c92d7b09

February 4, 2023

Score: 10 MALWARE FAMILY: chaosTAGS:family:chaos, evasion, ransomware, spyware, stealerMD5: fa06e6aadef2365052156f12c92d7b09SHA1: 82de91795547028be327e75cee0fdf082352bfc9ANALYSIS DATE: 2023-02-04T05:26:04ZTTPS: T1490, T1059, T1107, T1491, T1112, T1082, T1005,...

Malware Analysis – evasion – 60e7ed1e5a4f355fbb6cc950aa3a76c8

February 4, 2023

Score: 7 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 60e7ed1e5a4f355fbb6cc950aa3a76c8SHA1: d4af30d0b5a84a3c3c40c0d8501802bce4ed1be9ANALYSIS DATE: 2023-02-04T05:45:02ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – djvu – a10001188943b8189970fde759969f48

February 4, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: a10001188943b8189970fde759969f48SHA1: b32d033108644ddb50848b12fe95f95f70ca835aANALYSIS DATE: 2023-02-04T05:31:42ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – amadey – fd02bf0f245e164419efd8783fd5e536

February 4, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:fabookie, family:laplas, family:smokeloader, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: fd02bf0f245e164419efd8783fd5e536SHA1: e3efc6c4a901833b1564ffd04c0ddf9e250538ccANALYSIS...

Instant Checkmate – 11,943,887 breached accounts

February 4, 2023

HIBP In 2019, the public records search service Instant Checkmate suffered a data breach that later came to light in...

LockBit 3.0 Ransomware Victim: virtuosgames[.]com

February 4, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Cobalt Stike Beacon Detected – 120[.]77[.]1[.]92:8000

February 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 192[.]227[.]232[.]195:80

February 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 82[.]157[.]163[.]90:80

February 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 199[.]195[.]251[.]23:80

February 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 109[.]172[.]45[.]85:80

February 4, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

LockBit 3.0 Ransomware Victim: urmgroup[.]com[.]au

February 3, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Play Ransomware Victim: Point Dedicated Services

February 3, 2023

Play News Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

HackerOne Bug Bounty Disclosure: mystery-with-a-leaked-token-and-reusability-of-email-confirmation-link-leading-to-account-takeoverbygokulsk

February 3, 2023

Programme HackerOne Sorare Sorare Submitted by gokulsk gokulsk Report Mystery with a leaked token and Reusability of email confirmation link...

HackerOne Bug Bounty Disclosure: tiktok-2fa-bypassbyamans

February 3, 2023

Programme HackerOne TikTok TikTok Submitted by amans amans Report TikTok 2FA Bypass Full Report A considerable amount of time and...

Cobalt Stike Beacon Detected – 154[.]12[.]35[.]140:80

February 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]242[.]63[.]91:4443

February 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 82[.]157[.]102[.]120:8082

February 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 3[.]29[.]24[.]212:443

February 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]60[.]147[.]188:80

February 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 34[.]29[.]37[.]160:443

February 3, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Delta Electronics DX-2100L1-CN cross-site scripting | CVE-2023-0432

February 3, 2023

NAME__________Delta Electronics DX-2100L1-CN cross-site scriptingPlatforms Affected:Risk Level:9Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Delta Electronics DX-2100L1-CN is vulnerable to cross-site scripting, caused by improper validation...

Tenable tenable.io, tenable.sc and Nessus privilege escalation | CVE-2023-0524

February 3, 2023

NAME__________Tenable tenable.io, tenable.sc and Nessus privilege escalationPlatforms Affected:Tenable Network Security Nessus Tenable Tenable.io Tenable Tenable.scRisk Level:9.1Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Tenable tenable.io, tenable.sc...

TRENDnet TEW-652BRP command execution | CVE-2023-0611

February 3, 2023

NAME__________TRENDnet TEW-652BRP command executionPlatforms Affected:Risk Level:8.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION__________TRENDnet TEW-652BRP could allow a remote authenticated attacker to execute arbitrary...

Main Story

Editor’s Picks

Trending Story

Featured Story

You may have missed