Security

Malware Analysis – djvu – f24f08bd4adf39c2a9bf2122f8486b26

November 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:05ad9c5ec543eb32dfa8e77bcd579c06, botnet:1827, botnet:517, botnet:5m, botnet:mario23_10, botnet:srt123, backdoor, collection, discovery, evasion, infostealer,...

Malware Analysis – makop – d26afd54021ba871403b3c6ba520e4ae

November 18, 2022

Score: 10 MALWARE FAMILY: makopTAGS:family:makop, ransomware, spyware, stealerMD5: d26afd54021ba871403b3c6ba520e4aeSHA1: a7f2167bb9748122f72e751b98c80c317f1e6af9ANALYSIS DATE: 2022-11-17T22:40:09ZTTPS: T1059, T1107, T1490, T1082, T1005, T1081, T1102 ScoreMeaningExample10Known...

Malware Analysis – djvu – 63d842684b010d84e91086bfc8d9f0f0

November 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:05ad9c5ec543eb32dfa8e77bcd579c06, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware,...

Malware Analysis – makop – 586d6732d8c8d4045b05276f2a0cbf53

November 18, 2022

Score: 10 MALWARE FAMILY: makopTAGS:family:makop, ransomware, spyware, stealerMD5: 586d6732d8c8d4045b05276f2a0cbf53SHA1: e58187c1708079e9487310f8c4b34722e4271f35ANALYSIS DATE: 2022-11-17T22:41:03ZTTPS: T1059, T1107, T1490, T1005, T1081, T1102, T1082 ScoreMeaningExample10Known...

Malware Analysis – evasion – ef4fdf65fc90bfda8d1d2ae6d20aff60

November 18, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: ef4fdf65fc90bfda8d1d2ae6d20aff60SHA1: 9431227836440c78f12bfb2cb3247d59f4d4640bANALYSIS DATE: 2022-11-17T23:29:00ZTTPS: T1102, T1012, T1082, T1088, T1089, T1112, T1491, T1004...

CISA: CISA, NSA, and ODNI Release Guidance for Customers on Securing the Software Supply Chain

November 18, 2022

CISA, NSA, and ODNI Release Guidance for Customers on Securing the Software Supply Chain Today, CISA, the National Security Agency...

Two public schools in Michigan hit by a ransomware attack

November 17, 2022

Public schools in two Michigan counties were forced to halt their activities, including the lessons, after a ransomware attack. ...

Email Security Best Practices for Phishing Prevention

November 17, 2022

Trend Micro Research reported a 137.6% growth in phishing attacks blocked and detected in 2021. Explore the latest phishing trends...

Global Cyber Risk at Elevated Level

November 17, 2022

North America Least Prepared for Cyberattacks If you like the site, please consider joining the telegram channel or supporting us...

CISA: #StopRansomware: Hive

November 17, 2022

#StopRansomware: Hive Today, CISA, the Federal Bureau of Investigation (FBI), and the Department of Health and Human Services (HHS) released...

Malware Analysis – djvu – 3e7f3868a74c02eb301e31bd7dd77282

November 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...

Malware Analysis – djvu – b2c4eb0e8bfac5267b26c2cef4b93c58

November 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: b2c4eb0e8bfac5267b26c2cef4b93c58SHA1: 89b25e553382379fb15344d9a88b744879ee59fdANALYSIS DATE: 2022-11-17T16:58:19ZTTPS: T1222, T1082, T1053, T1005,...

Malware Analysis – – a1cadb91da778d550be10373b94afa2c

November 17, 2022

Score: 5 MALWARE FAMILY: TAGS:MD5: a1cadb91da778d550be10373b94afa2cSHA1: 6122146e5f76c5519d9ada04c2458d393c8069dfANALYSIS DATE: 2022-11-17T15:47:31ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – d83bba5f1285754574318b5268e5e5ae

November 17, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1827, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer,...

Malware Analysis – locky – e462024bcb091ac107da1c565895dd57

November 17, 2022

Score: 10 MALWARE FAMILY: lockyTAGS:family:locky, family:marsstealer, botnet:default, discovery, persistence, ransomware, stealerMD5: e462024bcb091ac107da1c565895dd57SHA1: 2f17adb1ce33312b887b117d6b358361a4d2c1e8ANALYSIS DATE: 2022-11-17T16:38:43ZTTPS: T1082, T1012, T1112, T1042, T1060...

Security

Malware Analysis – djvu – f24f08bd4adf39c2a9bf2122f8486b26

Malware Analysis – makop – d26afd54021ba871403b3c6ba520e4ae

Malware Analysis – djvu – 63d842684b010d84e91086bfc8d9f0f0

Malware Analysis – makop – 586d6732d8c8d4045b05276f2a0cbf53

Malware Analysis – evasion – ef4fdf65fc90bfda8d1d2ae6d20aff60

CISA: CISA, NSA, and ODNI Release Guidance for Customers on Securing the Software Supply Chain

Two public schools in Michigan hit by a ransomware attack

Email Security Best Practices for Phishing Prevention

Global Cyber Risk at Elevated Level

CISA: #StopRansomware: Hive

Malware Analysis – djvu – 3e7f3868a74c02eb301e31bd7dd77282

Malware Analysis – djvu – b2c4eb0e8bfac5267b26c2cef4b93c58

Malware Analysis – – a1cadb91da778d550be10373b94afa2c

Malware Analysis – djvu – d83bba5f1285754574318b5268e5e5ae

Malware Analysis – locky – e462024bcb091ac107da1c565895dd57

Magento and Adobe Commerce websites under attack

nuvola – Tool To Dump And Perform Automatic And Manual Security Analysis On Aws Environments Configurations And Services

Cobalt Stike Beacon Detected – 116[.]211[.]120[.]25:8088

Cobalt Stike Beacon Detected – 43[.]143[.]119[.]212:6666

Cobalt Stike Beacon Detected – 3[.]73[.]117[.]245:443

Cobalt Stike Beacon Detected – 1[.]116[.]3[.]85:443

Cobalt Stike Beacon Detected – 1[.]117[.]60[.]167:8443

Cobalt Stike Beacon Detected – 120[.]78[.]85[.]158:6002

Cobalt Stike Beacon Detected – 43[.]155[.]66[.]70:443

[NOVA] – Ransomware Victim: Portel Logistic Technologies

[QILIN] – Ransomware Victim: www[.]nuphoton[.]com

[QILIN] – Ransomware Victim: semco-tech[.]com

[KAWA4096] – Ransomware Victim: ****-*[.]co[.]jp

[QILIN] – Ransomware Victim: simmons-Boardman Publishing, Inc

You may have missed