LockBit 3.0 Ransomware Victim: thedonovancompany[.]com
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
Cobalt Stike Beacon Detected – 4[.]205[.]51[.]119:8443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 103[.]100[.]210[.]43:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 51[.]79[.]230[.]42:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – smokeloader – b1e6371800ed2beea2b05572054e5fa3
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: b1e6371800ed2beea2b05572054e5fa3SHA1: 5e1f3278645fa1ff22d32e494a9c6580030d5232ANALYSIS DATE: 2022-12-22T21:01:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – ransomware – b08b6219961caac74b033c88233c67f6
Score: 10 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: b08b6219961caac74b033c88233c67f6SHA1: f4d8c562f51537b57b7c25ff552c736c383c2d60ANALYSIS DATE: 2022-12-22T21:31:49ZTTPS: T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – smokeloader – 79fe9ab1a7a010786684dfbb784b7837
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 79fe9ab1a7a010786684dfbb784b7837SHA1: 2d709acfb03604d76949053d42174e3d416ae515ANALYSIS DATE: 2022-12-22T21:31:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – smokeloader – 2eb56154df927e0c5fcae69ed3c11990
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 2eb56154df927e0c5fcae69ed3c11990SHA1: fd16efabd12014a64c9d71f480618eded76fab59ANALYSIS DATE: 2022-12-22T23:01:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – ransomware – c09116efea795c3170634211222aa3c9
Score: 5 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: c09116efea795c3170634211222aa3c9SHA1: a3ceacdcb37a45bc6d36d84b28c2ed71492caef8ANALYSIS DATE: 2022-12-22T23:45:23ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
Malware Analysis – djvu – 9867a82df7697272a3dbfad12519aac6
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 9867a82df7697272a3dbfad12519aac6SHA1: 7027244a46aefbf80c7903f59ad019394d548f36ANALYSIS DATE: 2022-12-22T22:22:13ZTTPS: T1222, T1005, T1081, T1012, T1060, T1112,...
Malware Analysis – djvu – 329c38dfcf60d7e05c4e28d9da5fa426
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 329c38dfcf60d7e05c4e28d9da5fa426SHA1: cc02de6e3facb660a01b24c1c2633a55829b8cc2ANALYSIS DATE: 2022-12-22T23:08:10ZTTPS: T1082, T1053, T1005, T1081, T1012, T1060,...
North Korea linked threat actors have stolen an estimated billion worth of cryptocurrency and other virtual assets in the past five years
North Korea-linked threat actors have stolen an estimated $1.2 billion worth of cryptocurrency and other virtual assets in the past...
The Vice Society ransomware group has adopted new custom ransomware with a strong encryption scheme in recent intrusions
The Vice Society ransomware group has adopted new custom ransomware, with a strong encryption scheme, in recent intrusions.SentinelOne researchers discovered...
Microsoft spotted an upgraded variant of the Zerobot botnet that spreads by exploiting Apache vulnerabilities
Microsoft spotted an upgraded variant of the Zerobot botnet that spreads by exploiting Apache vulnerabilities.Microsoft Threat Intelligence Center (MSTIC) researchers...
Prevent Cryptocurrency Cyber Extortion
Highly destructive cybercrime is on the rise, and most of it is being funded with anonymous cryptocurrency. We review cryptocurrency...
Comcast Xfinity accounts hacked in widespread 2FA bypass attacks
Comcast Xfinity customers report their accounts being hacked in widespread attacks that bypass two-factor authentication. These compromised accounts are then...
Vice Society ransomware gang switches to new custom encryptor
The Vice Society ransomware operation has switched to using a custom ransomware encrypt that implements a strong, hybrid encryption scheme...
Brave launches FrodoPIR, a privacy-focused database query system
Brave Software developers have created a new privacy-centric database query system called FrodoPIR that retrieves data from servers without disclosing the...
HackerOne Bug Bounty Disclosure: managing-pagesbyali_shehab
Programme HackerOne GitHub GitHub Submitted by ali_shehab ali_shehab Report Managing Pages Full Report A considerable amount of time and effort...
HIVE Ransomware Victim: Alvaria
HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
HIVE Ransomware Victim: MHMR Authority Of Brazos Valley
HIVE Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...
Malware Analysis – smokeloader – 7c8e5d5ed26a22105a98021c6d7849c2
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7c8e5d5ed26a22105a98021c6d7849c2SHA1: d7b8d6356827b4a7de1a473864809f1550261939ANALYSIS DATE: 2022-12-22T16:02:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – ransomware – 2fa6b5c7adb76fe7b9ad9a6bf17ce7e2
Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 2fa6b5c7adb76fe7b9ad9a6bf17ce7e2SHA1: 4c512b3e8f20f432e5684bc81f7379593d5532a8ANALYSIS DATE: 2022-12-22T15:36:03ZTTPS: T1082, T1107, T1490, T1012, T1120 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 8fb143c61b306a8605ba030dec05bc31
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 8fb143c61b306a8605ba030dec05bc31SHA1: cfabdbdea3dca7112e98c23b872194ffc250618cANALYSIS DATE: 2022-12-22T15:45:43ZTTPS: T1060, T1112, T1222, T1053, T1005, T1081,...
