threatintel

Malware Analysis – amadey – a1a830ec32763ae045f543eba5b94059

April 21, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:raccoon, family:rhadamanthys, family:smokeloader, family:vidar, botnet:bf58e1879f88b222ba2391682babf9d8, botnet:fc8427198f843d72c1aa8a66db1a98f3, botnet:pub1, backdoor, discovery, evasion, persistence, ransomware, spyware,...

Malware Analysis – smokeloader – 11472d7a71e987834c71c1dfe9eea130

April 21, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 11472d7a71e987834c71c1dfe9eea130SHA1: 285c43fa2d98c92e9fd43dd979219ec49603341bANALYSIS DATE: 2023-04-21T17:21:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Malware Analysis – amadey – ecf6c8be4adce2f2f2edd00b366a9087

April 21, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:lumma, family:raccoon, family:rhadamanthys, family:smokeloader, family:vidar, family:xmrig, botnet:bf58e1879f88b222ba2391682babf9d8, botnet:fc8427198f843d72c1aa8a66db1a98f3, botnet:pub1, backdoor, collection, discovery, evasion, miner,...

Malware Analysis – ransomware – 459085283ba0c03ae143d25791cc1880

April 21, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: 459085283ba0c03ae143d25791cc1880SHA1: 688f769f302d06443ae42a794f0d2d36be8c7886ANALYSIS DATE: 2023-04-21T17:43:04ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

threatintel

Malware Analysis – amadey – a1a830ec32763ae045f543eba5b94059

Malware Analysis – smokeloader – 11472d7a71e987834c71c1dfe9eea130

Malware Analysis – amadey – ecf6c8be4adce2f2f2edd00b366a9087

Malware Analysis – ransomware – 459085283ba0c03ae143d25791cc1880

CISA: CISA Releases Two SBOM Documents

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: Oracle Releases Security Updates

CISA: Cisco Releases Security Advisories for Multiple Products

GhostToken Flaw Could Let Attackers Hide Malicious Apps in Google Cloud Platform

Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

Black Basta Ransomware Victim: Precision Fabrics Group

N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX

14 Kubernetes and Cloud Security Challenges and How to Solve Them

LockBit 3.0 Ransomware Victim: tubosreunidosgroup[.]com

LockBit 3.0 Ransomware Victim: soapro[.]ao

LockBit 3.0 Ransomware Victim: pkffinconta[.]ro

LockBit 3.0 Ransomware Victim: ibp[.]com[.]br

LockBit 3.0 Ransomware Victim: soshin[.]co[.]jp

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

3CX hack caused by trading software supply chain attack

Lazarus hackers now push Linux malware via fake job offers

Google: Ukraine targeted by 60% of Russian phishing attacks in 2023

VMware fixes vRealize bug that let attackers run code as root

Attackers use abandoned WordPress plugin to backdoor websites

[NIGHTSPIRE] – Ransomware Victim: vratatech

[NIGHTSPIRE] – Ransomware Victim: speedmais

[NIGHTSPIRE] – Ransomware Victim: Brihta

[WARLOCK] – Ransomware Victim: tein[.]co[.]jp

[WARLOCK] – Ransomware Victim: mytune[.]me

You may have missed