OSINT

Atomic-Operator – A Python Package Is Used To Execute Atomic Red Team Tests (Atomics) Across Multiple Operating System Environments

June 3, 2022

This python package is used to execute Atomic Red Team tests (Atomics) across multiple operating system environments. (What's new?) Why?...

Alert! Unpatched critical Atlassian Confluence Zero-Day RCE flaw actively exploited

June 3, 2022

Atlassian warned of an actively exploited critical unpatched remote code execution flaw (CVE-2022-26134) in Confluence Server and Data Center products....

Cobalt Stike Beacon Detected – 52[.]200[.]129[.]141:443

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]243[.]187[.]201:8443

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]42[.]243[.]222:9999

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]221[.]168[.]93:443

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]142[.]29[.]218:4001

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 3[.]15[.]173[.]9:8080

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 114[.]132[.]188[.]20:5555

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 216[.]24[.]243[.]181:9999

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 20[.]187[.]187[.]128:443

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 103[.]122[.]244[.]68:80

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]225[.]157[.]233:443

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 172[.]105[.]183[.]174:443

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]132[.]81[.]152:6667

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 110[.]42[.]141[.]62:8888

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 114[.]132[.]74[.]65:80

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 164[.]92[.]103[.]99:80

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 137[.]184[.]101[.]238:443

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Microsoft blocked Polonium attacks against Israeli organizations

June 3, 2022

Microsoft blocked an attack activity aimed at Israeli organizations attributed to a previously unknown Lebanon-based hacking group tracked as POLONIUM....

WinDealer dealing on the side

June 3, 2022

Introduction LuoYu is a lesser-known threat actor that has been active since 2008. It primarily goes after targets located in...

CISA: CISA Adds One Known Exploited Vulnerability (CVE-2022-26134) to Catalog

June 3, 2022

CISA Adds One Known Exploited Vulnerability (CVE-2022-26134) to Catalog CISA has added one new vulnerability—CVE-2022-26134—to its Known Exploited Vulnerabilities Catalog, based...

CISA: Atlassian Releases Security Advisory for Confluence Server and Data Center, CVE-2022-26134

June 3, 2022

Atlassian Releases Security Advisory for Confluence Server and Data Center, CVE-2022-26134 Atlassian has released a security advisory to address a...

Cobalt Stike Beacon Detected – 5[.]189[.]223[.]11:443

June 3, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

OSINT

Atomic-Operator – A Python Package Is Used To Execute Atomic Red Team Tests (Atomics) Across Multiple Operating System Environments

Alert! Unpatched critical Atlassian Confluence Zero-Day RCE flaw actively exploited

Cobalt Stike Beacon Detected – 52[.]200[.]129[.]141:443

Cobalt Stike Beacon Detected – 47[.]243[.]187[.]201:8443

Cobalt Stike Beacon Detected – 101[.]42[.]243[.]222:9999

Cobalt Stike Beacon Detected – 124[.]221[.]168[.]93:443

Cobalt Stike Beacon Detected – 43[.]142[.]29[.]218:4001

Cobalt Stike Beacon Detected – 3[.]15[.]173[.]9:8080

Cobalt Stike Beacon Detected – 114[.]132[.]188[.]20:5555

Cobalt Stike Beacon Detected – 216[.]24[.]243[.]181:9999

Cobalt Stike Beacon Detected – 20[.]187[.]187[.]128:443

Cobalt Stike Beacon Detected – 103[.]122[.]244[.]68:80

Cobalt Stike Beacon Detected – 104[.]225[.]157[.]233:443

Cobalt Stike Beacon Detected – 172[.]105[.]183[.]174:443

Cobalt Stike Beacon Detected – 120[.]132[.]81[.]152:6667

Cobalt Stike Beacon Detected – 110[.]42[.]141[.]62:8888

Cobalt Stike Beacon Detected – 114[.]132[.]74[.]65:80

Cobalt Stike Beacon Detected – 164[.]92[.]103[.]99:80

Cobalt Stike Beacon Detected – 137[.]184[.]101[.]238:443

Microsoft blocked Polonium attacks against Israeli organizations

WinDealer dealing on the side

CISA: CISA Adds One Known Exploited Vulnerability (CVE-2022-26134) to Catalog

CISA: Atlassian Releases Security Advisory for Confluence Server and Data Center, CVE-2022-26134

Cobalt Stike Beacon Detected – 5[.]189[.]223[.]11:443

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed