Security

Malware Analysis – persistence – 34b7f6870d28447885d2ff2781645dd5

December 21, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, upxMD5: 34b7f6870d28447885d2ff2781645dd5SHA1: d587ed39901accd9c71fe1fab25fe25d4a1f674cANALYSIS DATE: 2022-12-21T05:34:28ZTTPS: T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Cobalt Stike Beacon Detected – 110[.]40[.]199[.]147:443

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]76[.]97[.]48:80

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 104[.]238[.]159[.]118:443

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]71[.]84[.]65:8443

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 191[.]101[.]78[.]79:8090

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 8[.]134[.]56[.]231:80

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]26[.]240[.]21:55443

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 123[.]57[.]131[.]96:80

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 107[.]189[.]12[.]60:443

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 179[.]60[.]150[.]99:80

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 139[.]196[.]234[.]164:8888

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]3[.]194[.]221:8080

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 198[.]98[.]55[.]58:80

December 21, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Diving into an Old Exploit Chain and Discovering 3 new SIP-Bypass Vulnerabilities

December 20, 2022

More than two years ago, a researcher, A2nkF demonstrated the exploit chain from root privilege escalation to SIP-Bypass up to...

Raspberry Robin Malware Targets Telecom, Governments

December 20, 2022

We found samples of the Raspberry Robin malware spreading in telecommunications and government office systems beginning September. The main payload...

Web3 IPFS Only Used for Phishing – So Far

December 20, 2022

We discuss the use of the InterPlanetary File System (IPFS) in phishing attacks. If you like the site, please consider...

Malware Analysis – makop – 6a956731b3677dd9d4d18641d40532ab

December 20, 2022

Score: 10 MALWARE FAMILY: makopTAGS:family:makop, ransomware, spyware, stealerMD5: 6a956731b3677dd9d4d18641d40532abSHA1: 1994ee0b381c5528d5b5c01fb97a14b5ff81e5a5ANALYSIS DATE: 2022-12-20T17:44:04ZTTPS: T1059, T1107, T1490, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – play – 57bcb8cfad510109f7ddedf045e86a70

December 20, 2022

Score: 10 MALWARE FAMILY: playTAGS:family:play, ransomware, spyware, stealerMD5: 57bcb8cfad510109f7ddedf045e86a70SHA1: e6c381859f53d0c0db9fcd30fa601ecb935b93e0ANALYSIS DATE: 2022-12-20T15:47:27ZTTPS: T1005, T1081, T1012, T1120, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 98f766d73ebce6d6f50e096bf91de915

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: 98f766d73ebce6d6f50e096bf91de915SHA1: 66995579b886ad37ca5b6a60251f40c756177dcaANALYSIS DATE: 2022-12-20T16:15:06ZTTPS: T1060, T1112, T1082, T1053, T1012, T1222,...

Malware Analysis – djvu – daf392649efbbfda72d564e792a21679

December 20, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, discovery, persistence, ransomware, spyware, stealerMD5: daf392649efbbfda72d564e792a21679SHA1: a8e8d94c5887ef837c812a51e528d3244493d98cANALYSIS DATE: 2022-12-20T16:49:37ZTTPS: T1222, T1082, T1005, T1081, T1012, T1060,...

Microsoft shares details for a Gatekeeper Bypass bug in Apple macOS

December 20, 2022

Microsoft disclosed technical details of a vulnerability in Apple macOS that could be exploited by an attacker to bypass Gatekeeper....

HTTPLoot – An Automated Tool Which Can Simultaneously Crawl, Fill Forms, Trigger Error/Debug Pages And “Loot” Secrets Out Of The Client-Facing Code Of Sites

December 20, 2022

An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code...

Cobalt Stike Beacon Detected – 45[.]81[.]128[.]189:443

December 20, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Security

Malware Analysis – persistence – 34b7f6870d28447885d2ff2781645dd5

Cobalt Stike Beacon Detected – 110[.]40[.]199[.]147:443

Cobalt Stike Beacon Detected – 45[.]76[.]97[.]48:80

Cobalt Stike Beacon Detected – 104[.]238[.]159[.]118:443

Cobalt Stike Beacon Detected – 124[.]71[.]84[.]65:8443

Cobalt Stike Beacon Detected – 191[.]101[.]78[.]79:8090

Cobalt Stike Beacon Detected – 8[.]134[.]56[.]231:80

Cobalt Stike Beacon Detected – 120[.]26[.]240[.]21:55443

Cobalt Stike Beacon Detected – 123[.]57[.]131[.]96:80

Cobalt Stike Beacon Detected – 107[.]189[.]12[.]60:443

Cobalt Stike Beacon Detected – 179[.]60[.]150[.]99:80

Cobalt Stike Beacon Detected – 139[.]196[.]234[.]164:8888

Cobalt Stike Beacon Detected – 119[.]3[.]194[.]221:8080

Cobalt Stike Beacon Detected – 198[.]98[.]55[.]58:80

Diving into an Old Exploit Chain and Discovering 3 new SIP-Bypass Vulnerabilities

Raspberry Robin Malware Targets Telecom, Governments

Web3 IPFS Only Used for Phishing – So Far

Malware Analysis – makop – 6a956731b3677dd9d4d18641d40532ab

Malware Analysis – play – 57bcb8cfad510109f7ddedf045e86a70

Malware Analysis – djvu – 98f766d73ebce6d6f50e096bf91de915

Malware Analysis – djvu – daf392649efbbfda72d564e792a21679

Microsoft shares details for a Gatekeeper Bypass bug in Apple macOS

HTTPLoot – An Automated Tool Which Can Simultaneously Crawl, Fill Forms, Trigger Error/Debug Pages And “Loot” Secrets Out Of The Client-Facing Code Of Sites

Cobalt Stike Beacon Detected – 45[.]81[.]128[.]189:443

CVE Alert: CVE-2025-10058 – smackcoders – WP Import – Ultimate CSV XML Importer for WordPress

CVE Alert: CVE-2025-10057 – smackcoders – WP Import – Ultimate CSV XML Importer for WordPress

CVE Alert: CVE-2025-10143 – catchthemes – Catch Dark Mode

CVE Alert: CVE-2025-10589 – N-Partner – N-Reporter

Cobalt Strike Beacon Detected – 38[.]173[.]19[.]175:8731

You may have missed