IcedID Botnet Distributors Abuse Google PPC to Distribute Malware
We analyze the latest changes in IcedID botnet from a campaign that abuses Google pay per click (PPC) ads to...
HackerOne Bug Bounty Disclosure: xss-due-to-incorrect-handling-of-postmessagesbymoom825
Programme HackerOne Khan Academy Khan Academy Submitted by moom825 moom825 Report xss due to incorrect handling of postmessages Full Report...
HackerOne Bug Bounty Disclosure: secret-api-key-is-logged-in-cleartextbysim4n6
Programme HackerOne Omise Omise Submitted by sim4n6 sim4n6 Report Secret API Key is logged in cleartext Full Report A considerable...
S3Crets_Scanner – Hunting For Secrets Uploaded To Public S3 Buckets
S3cret Scanner tool designed to provide a complementary layer for the Contributing Pull requests and forks are welcome. For major...
Cobalt Stike Beacon Detected – 43[.]138[.]33[.]133:8001
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 91[.]240[.]118[.]218:8093
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 18[.]194[.]244[.]87:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 106[.]75[.]218[.]220:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 88[.]214[.]27[.]53:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 199[.]195[.]248[.]79:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Royal Ransomware Victim: Rech Informatica Ltda
RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...
Royal Ransomware Victim: Aegea Group companies
RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...
Cobalt Stike Beacon Detected – 121[.]4[.]138[.]60:9999
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 121[.]37[.]5[.]94:7777
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 198[.]74[.]115[.]207:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 77[.]73[.]131[.]193:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 119[.]29[.]162[.]38:8088
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]138[.]41[.]95:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 8[.]131[.]94[.]164:7443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 106[.]75[.]247[.]178:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – djvu – 31779136196425ada7f38369086e99cc
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 31779136196425ada7f38369086e99ccSHA1: 65121e085572620c45d16e6683663ead301e5b03ANALYSIS DATE: 2022-12-23T09:12:06ZTTPS: T1005, T1081, T1012, T1082, T1222, T1053,...
Malware Analysis – smokeloader – 2d5f1f172ee74e3ad998059669e9e39e
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2d5f1f172ee74e3ad998059669e9e39eSHA1: 0ea9cf83108b57219d3c784ac1589ee5551c90a4ANALYSIS DATE: 2022-12-23T10:31:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – f5fd1959bf55c5a97a4267c676b6a781
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: f5fd1959bf55c5a97a4267c676b6a781SHA1: 7f3914e91ea1c1290b3cc768cbdaa3dd547a2844ANALYSIS DATE: 2022-12-23T10:02:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – e8af5b0c9d7b8d7f7357ee0fd9ea0218
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: e8af5b0c9d7b8d7f7357ee0fd9ea0218SHA1: 58a6671307eda70e55ea15dbc46d32769e6b2823ANALYSIS DATE: 2022-12-23T10:15:15ZTTPS: T1082, T1130, T1112, T1060, T1222 ScoreMeaningExample10Known badA malware...
