OSINT

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

April 25, 2023

Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 2c2bd73dcba2e7eb7fa78105c84ca2b1SHA1: 24d7defc1e00739461dda0b275bd8304277aafd1ANALYSIS DATE: 2023-04-25T17:37:03ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

April 25, 2023

Score: 10 MALWARE FAMILY: babukTAGS:family:babuk, family:darkside, ransomwareMD5: f9afb31bc17811e5ab4fa406f105b1feSHA1: d1a9449dcc8a3aa0c887bce71f128866175f679aANALYSIS DATE: 2023-04-25T17:44:04ZTTPS: T1107, T1490, T1082, T1012, T1120 ScoreMeaningExample10Known badA malware family...

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

April 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomwareMD5: 4bc6e26f6bf9258473180f9805bbe508SHA1: dacc8979f7e59e60be9cb842982ee0deca5b3248ANALYSIS DATE: 2023-04-25T17:41:03ZTTPS: T1130, T1112, T1060, T1222, T1082, T1053 ScoreMeaningExample10Known badA...

OSINT

Malware Analysis – evasion – 2c2bd73dcba2e7eb7fa78105c84ca2b1

Malware Analysis – babuk – f9afb31bc17811e5ab4fa406f105b1fe

Malware Analysis – djvu – 4bc6e26f6bf9258473180f9805bbe508

CISA: CISA Releases Two Industrial Control Systems Advisories

New SLP Vulnerability Could Let Attackers Launch 2200x Powerful DDoS Attacks

Iranian Hackers Launch Sophisticated Attacks Targeting Israel with PowerLess Backdoor

Posh C2 Detected – 159[.]69[.]180[.]8:443

Google Cloud Introduces Security AI Workbench for Faster Threat Detection and Analysis

Modernizing Vulnerability Management: The Move Toward Exposure Management

Lazarus Subgroup Targeting Apple Devices with New RustBucket macOS Malware

LockBit 3.0 Ransomware Victim: nagase[.]co[.]jp

LockBit 3.0 Ransomware Victim: gruponutresa[.]com

LockBit 3.0 Ransomware Victim: goforcloud[.]com

LockBit 3.0 Ransomware Victim: abro[.]se

LockBit 3.0 Ransomware Victim: ultimateimageprinting[.]com

Google Authenticator App Gets Cloud Backup Feature for TOTP Codes

Karakurt Ransomware Victim: Winona Powder Coating

Karakurt Ransomware Victim: TransMedics

Karakurt Ransomware Victim: Lifeline Vascular Access

Yellow Pages Canada confirms cyber attack as Black Basta leaks data

Microsoft 365 search outage affects Outlook, Teams, and SharePoint

Exploit released for PaperCut flaw abused to hijack servers, patch now

APC warns of critical unauthenticated RCE flaws in UPS software

KuCoin’s Twitter account hacked to promote crypto scam

CVE Alert: CVE-2025-50070

CVE Alert: CVE-2025-50071

CVE Alert: CVE-2025-50082

CVE Alert: CVE-2025-50069

CVE Alert: CVE-2025-50081

You may have missed