RedPacket Security - InfoSec News & Tutorials

Cobalt Stike Beacon Detected – 124[.]223[.]217[.]185:9966

November 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 116[.]193[.]155[.]61:80

November 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 5[.]199[.]169[.]195:443

November 12, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – xmrig – 679a446a9df957ab96bd8eaa059f1edc

November 12, 2022

Score: 10 MALWARE FAMILY: xmrigTAGS:family:xmrig, discovery, evasion, miner, persistence, ransomware, spyware, stealerMD5: 679a446a9df957ab96bd8eaa059f1edcSHA1: a4bc35f5029077f304e3a1cd72ff75d219e4a022ANALYSIS DATE: 2022-11-11T21:38:31ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – hive – daa6c53378147fb212703048ad31702a

November 12, 2022

Score: 10 MALWARE FAMILY: hiveTAGS:family:hive, evasion, persistence, ransomware, spyware, stealerMD5: daa6c53378147fb212703048ad31702aSHA1: 22651c3a351fa7d21021b4713e0d30dfd9ce48e4ANALYSIS DATE: 2022-11-11T22:00:07ZTTPS: T1059, T1107, T1490, T1060, T1112, T1082,...

Malware Analysis – djvu – bc61264ac2c5e2665df415cb70a1326a

November 12, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: bc61264ac2c5e2665df415cb70a1326aSHA1: a909736d0ef0df42cd31546bdb08b82d9470898bANALYSIS DATE: 2022-11-11T23:07:20ZTTPS: T1082, T1012, T1060, T1112,...

CVE-2019-8561: A Hard-to-Banish PackageKit Framework Vulnerability in macOS

November 11, 2022

This blog entry details our investigation of CVE-2019-8561, a vulnerability that exists in the macOS PackageKit framework, a component used...

Long-running surveillance campaigns target Uyghurs with BadBazaar and MOONSHINE spyware

November 11, 2022

Lookout researchers discovered two long-running surveillance campaigns targeting the ethnic minority Uyghurs. Researchers from mobile security firm Lookout uncovered two...

Karakurt Ransomware Victim: Roxboro

November 11, 2022

KARAKURT RANSOMWARE NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...

Ransomware Victim: Özel GözAkademi Hastanesi

November 11, 2022

KARAKURT RANSOMWARE NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of...