[HANDALA] – Ransomware Victim: Benny Gantz
Ransomware Group: HANDALA VICTIM NAME: Benny Gantz NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
threatintel
[AKIRA] – Ransomware Victim: Brown Bottling Group
Ransomware Group: AKIRA VICTIM NAME: Brown Bottling Group NOTE: No files or stolen information are by RedPacket Security. Any legal...
[QILIN] – Ransomware Victim: DIamond Contracting, LLC
Ransomware Group: QILIN VICTIM NAME: DIamond Contracting, LLC NOTE: No files or stolen information are by RedPacket Security. Any legal...
[KILLSEC] – Ransomware Victim: medicheck[.]io
Ransomware Group: KILLSEC VICTIM NAME: medicheckio NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
[QILIN] – Ransomware Victim: Detroit Public TV
Ransomware Group: QILIN VICTIM NAME: Detroit Public TV NOTE: No files or stolen information are by RedPacket Security. Any legal...
[AKIRA] – Ransomware Victim: Idre Fjäll
Ransomware Group: AKIRA VICTIM NAME: Idre Fjäll NOTE: No files or stolen information are by RedPacket Security. Any legal issues...
[EVEREST] – Ransomware Victim: Pureform Radiology Center
Ransomware Group: EVEREST VICTIM NAME: Pureform Radiology Center NOTE: No files or stolen information are by RedPacket Security. Any legal...
[RANSOMHUB] – Ransomware Victim: bakpilic[.]com[.]tr
Ransomware Group: RANSOMHUB VICTIM NAME: bakpiliccomtr NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
THN Cybersecurity Recap: Last Week’s Top Threats and Trends (September 16-22)
Hold on tight, folks, because last week's cybersecurity landscape was a rollercoaster! We witnessed everything from North Korean hackers dangling...
[CACTUS] – Ransomware Victim: ten8fire[.]com
Ransomware Group: CACTUS VICTIM NAME: ten8firecom NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating...
Secator – The Pentester’S Swiss Knife
secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it...
PolyDrop – A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
BYOSI - Bring-Your-Own-Script-Interpreter - Leveraging the abuse of trusted applications, one is able to deliver a compatible script interpreter for...
Cobalt Strike Beacon Detected – 111[.]229[.]236[.]78:10000
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 175[.]178[.]13[.]109:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 123[.]56[.]28[.]18:4443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 8[.]134[.]222[.]157:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 120[.]26[.]64[.]126:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 101[.]43[.]25[.]166:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 85[.]239[.]52[.]173:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 156[.]238[.]233[.]75:1337
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 182[.]92[.]222[.]153:9091
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Strike Beacon Detected – 124[.]222[.]57[.]94:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
[TRINITY] – Ransomware Victim: Fabrica Industrial Machinery & Equipment
Ransomware Group: TRINITY VICTIM NAME: Fabrica Industrial Machinery & Equipment NOTE: No files or stolen information are by RedPacket Security....
Chinese Hackers Exploit GeoServer Flaw to Target APAC Nations with EAGLEDOOR Malware
A suspected advanced persistent threat (APT) originating from China targeted a government organization in Taiwan, and possibly other countries in...
