Samba addressed multiple high-severity vulnerabilities
Samba released updates to address multiple vulnerabilities that can be exploited to take control of impacted systems. Samba released updates...
OSINT
Gemini – 5,274,214 breached accounts
In late 2022, data allegedly taken from the Gemini crypto exchange was posted to a public hacking forum. The data...
Cobalt Stike Beacon Detected – 138[.]197[.]0[.]238:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 20[.]204[.]47[.]86:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 77[.]73[.]134[.]23:10443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]98[.]221[.]192:666
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – djvu – 246ada05d6ce992e7db8c2fc65df33f3
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 246ada05d6ce992e7db8c2fc65df33f3SHA1: 91fe33f8825cc735717a0faa13a5902fd6d40bafANALYSIS DATE: 2022-12-17T09:20:24ZTTPS: T1005, T1081, T1060, T1112, T1222, T1082,...
Malware Analysis – danabot – 50795361db9455af2f85372f3cfe0a47
Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, banker, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware,...
Malware Analysis – danabot – 78198165b3be4f33987cf5601a5b6276
Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, banker, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware,...
Malware Analysis – djvu – 18f2a906eb2220e2b4ea8dfbebc2609e
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...
Malware Analysis – danabot – 5c6352790c02dc6c8de1cdf48a1d9759
Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, banker, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware,...
Malware Analysis – djvu – 84ddcfcb55c1aa1dfdce65c841fd3193
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 84ddcfcb55c1aa1dfdce65c841fd3193SHA1: c88b590c9b54f72148143a68c09906ad93aa5904ANALYSIS DATE: 2022-12-17T11:42:22ZTTPS: T1005, T1081, T1222, T1053, T1012, T1082,...
Daily Vulnerability Trends: Sat Dec 17 2022
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-31705VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in...
BreachForums Database Leak Alert: Avito[.]ma
BreachForums - Databreach discussion & leaks forum. NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
Malware Analysis – danabot – 2141c84aab4a7591fb50e4fd24a9c2a7
Score: 10 MALWARE FAMILY: danabotTAGS:family:danabot, family:djvu, family:raccoon, family:redline, family:smokeloader, botnet:ec7a54fb6492ff3a52d09504b8ecf082, botnet:mario23_10, backdoor, banker, bootkit, collection, discovery, infostealer, persistence, ransomware, spyware,...
Malware Analysis – djvu – 33db41f0457efcefc1bb8a720c36cf58
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 33db41f0457efcefc1bb8a720c36cf58SHA1: 59f2568b418dfdd066a8a8236d8efb568d02a750ANALYSIS DATE: 2022-12-17T04:30:07ZTTPS: T1082, T1053, T1012, T1005, T1081, T1222,...
Cobalt Stike Beacon Detected – 113[.]31[.]126[.]45:8099
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 121[.]199[.]0[.]54:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 77[.]73[.]134[.]23:8443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 192[.]3[.]231[.]208:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 101[.]43[.]108[.]171:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 77[.]73[.]134[.]23:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 85[.]209[.]135[.]73:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 195[.]133[.]53[.]186:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
