threatintel

Malware Analysis – smokeloader – 11472d7a71e987834c71c1dfe9eea130

April 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 11472d7a71e987834c71c1dfe9eea130SHA1: 285c43fa2d98c92e9fd43dd979219ec49603341bANALYSIS DATE: 2023-04-21T17:21:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – ecf6c8be4adce2f2f2edd00b366a9087

April 21, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:raccoon, family:rhadamanthys, family:smokeloader, family:vidar, family:xmrig, botnet:bf58e1879f88b222ba2391682babf9d8, botnet:fc8427198f843d72c1aa8a66db1a98f3, botnet:pub1, backdoor, collection, discovery, evasion, miner,...

Malware Analysis – ransomware – 459085283ba0c03ae143d25791cc1880

April 21, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 459085283ba0c03ae143d25791cc1880SHA1: 688f769f302d06443ae42a794f0d2d36be8c7886ANALYSIS DATE: 2023-04-21T17:43:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

News

Capita confirms hackers stole data in recent cyberattack

April 21, 2023

London-based professional outsourcing giant Capita has published an update on the cyber-incident that impacted it at the start of the...

threatintel

Malware Analysis – smokeloader – 11472d7a71e987834c71c1dfe9eea130

Malware Analysis – amadey – ecf6c8be4adce2f2f2edd00b366a9087

Malware Analysis – ransomware – 459085283ba0c03ae143d25791cc1880

CISA: CISA Releases Two SBOM Documents

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: Oracle Releases Security Updates

CISA: Cisco Releases Security Advisories for Multiple Products

GhostToken Flaw Could Let Attackers Hide Malicious Apps in Google Cloud Platform

Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

Black Basta Ransomware Victim: Precision Fabrics Group

N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX

14 Kubernetes and Cloud Security Challenges and How to Solve Them

LockBit 3.0 Ransomware Victim: tubosreunidosgroup[.]com

LockBit 3.0 Ransomware Victim: ibp[.]com[.]br

LockBit 3.0 Ransomware Victim: soshin[.]co[.]jp

LockBit 3.0 Ransomware Victim: soapro[.]ao

LockBit 3.0 Ransomware Victim: pkffinconta[.]ro

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

3CX hack caused by trading software supply chain attack

Lazarus hackers now push Linux malware via fake job offers

Google: Ukraine targeted by 60% of Russian phishing attacks in 2023

VMware fixes vRealize bug that let attackers run code as root

Attackers use abandoned WordPress plugin to backdoor websites

Capita confirms hackers stole data in recent cyberattack

Cobalt Strike Beacon Detected – 121[.]43[.]37[.]134:4434

Cobalt Strike Beacon Detected – 119[.]29[.]231[.]118:443

Cobalt Strike Beacon Detected – 39[.]101[.]74[.]162:443

Cobalt Strike Beacon Detected – 8[.]218[.]112[.]112:8880

Cobalt Strike Beacon Detected – 47[.]109[.]48[.]57:443

You may have missed