Cobalt Stike Beacon Detected – 70[.]34[.]213[.]15:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Security
Cobalt Stike Beacon Detected – 2[.]56[.]173[.]252:81
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]143[.]225[.]146:8443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 107[.]189[.]28[.]84:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 94[.]74[.]105[.]230:8090
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 107[.]189[.]6[.]239:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]132[.]222[.]36:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – amadey – e56bdbd3bbf16c712fd3964d47a2284d
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1827, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, spyware,...
Malware Analysis – dcrat – 079fa9293dc34904e2dc1dfe4450e17a
Score: 10 MALWARE FAMILY: dcratTAGS:family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1827, botnet:517, botnet:mario23_10, backdoor, collection, discovery, evasion, infostealer, persistence, ransomware, rat,...
Malware Analysis – amadey – 000e96a33f00b6e8f473f96680e97105
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:dcrat, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:1827, botnet:517, botnet:mario23_10, botnet:srt, backdoor, collection, discovery, evasion, infostealer, persistence,...
Malware Analysis – smokeloader – 71f0f10d55a7c76842144f85aa453b1e
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 71f0f10d55a7c76842144f85aa453b1eSHA1: 0465ab92492754c17b2fe0ac8a9c77657d4010b0ANALYSIS DATE: 2022-11-16T22:51:58ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Posh C2 Detected – 165[.]22[.]119[.]30:443
The Information provided at the time of posting was detected as "Posh C2". Depending on when you are viewing this...
Will Cloud-Native Network Security Oust Firewalls?
Security threats have already begun to outpace cloud firewalls. It’s a fact. But organizations exploring new cloud-native solution find themselves...
Electricity/Energy Cybersecurity: Trends & Survey Response
Based on our survey of over 900 ICS security leaders in the United States, Germany, and Japan, we dig deeper...
Pilfered Keys: Free App Infected by Malware Steals Keychain Data
Open-source applications are a practical way to save money while keeping up with your productivity. However, this can be abused...
Complete Guide to Protecting 7 Attack Vectors
The quicker a cyberattack is identified, the less it costs. Jon Clay, VP of Threat Intelligence, reviews 7 key initial...
F5 fixed 2 high-severity Remote Code Execution bugs in its products
Researchers at cybersecurity firm Rapid7 have identified several vulnerabilities and other potential security issues affecting F5 products. Rapid7 researchers discovered...
CISA: Cisco Releases Security Updates for Identity Services Engine
Cisco Releases Security Updates for Identity Services Engine Cisco has released security updates for vulnerabilities affecting Cisco Identity Services Engine...
Lazarus APT uses DTrack backdoor in attacks against LATAM and European orgs
North Korea-linked Lazarus APT is using a new version of the DTrack backdoor in attacks aimed at organizations in Europe...
Malware Analysis – djvu – 26bc838e4d36c0d4f7c8e45458670276
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 26bc838e4d36c0d4f7c8e45458670276SHA1: ea289be9fbd1f6252caa58f7e41dc0ed4f4a3ea3ANALYSIS DATE: 2022-11-16T16:25:43ZTTPS: T1005, T1081, T1222, T1082,...
Malware Analysis – amadey – 114a29e4828e47605fb68bbda1c91cd4
Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:asyncrat, family:dcrat, family:djvu, family:eternity, family:raccoon, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:@redlinevip cloud (tg: @fatherofcarders), botnet:client6, botnet:dbffbdbc9786a5c270e6dd2d647e18ea,...
Malware Analysis – evasion – 06121671b9de18edfc74f1ca3c566001
Score: 8 MALWARE FAMILY: evasionTAGS:evasion, ransomwareMD5: 06121671b9de18edfc74f1ca3c566001SHA1: 12d586ccb57197b5ea48ff978f6e59ed20a1f7a3ANALYSIS DATE: 2022-11-16T15:12:04ZTTPS: T1082, T1491, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...
Malware Analysis – djvu – 4af869180d81d4cfb263e86d7161a18a
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 4af869180d81d4cfb263e86d7161a18aSHA1: 01a0428bb825147cde47c922f04b6e074f908ca0ANALYSIS DATE: 2022-11-16T15:16:16ZTTPS: T1060, T1112, T1082, T1005,...
CISA: Mozilla Releases Security Updates for Multiple Products
Mozilla Releases Security Updates for Multiple Products Mozilla has released security updates to address vulnerabilities in Thunderbird, Firefox ESR, and Firefox. An...
