threatintel

Malware Analysis – djvu – 253efb250e4405950a48961913a5ed55

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 253efb250e4405950a48961913a5ed55SHA1: 2289e888d0ac933f1cd7f5eecce18db00d5a7904ANALYSIS DATE: 2023-02-24T22:11:56ZTTPS: T1060, T1112, T1053, T1012, T1082,...

Malware Analysis – redline – 973978433de985f2e501f5a0484b1fc3

February 25, 2023

Score: 10 MALWARE FAMILY: redlineTAGS:family:redline, discovery, infostealer, persistence, ransomware, spywareMD5: 973978433de985f2e501f5a0484b1fc3SHA1: f93b4408195b0904cc84c9496cc3a54dcfa5a146ANALYSIS DATE: 2023-02-24T21:53:12ZTTPS: T1112, T1042, T1012, T1082, T1005, T1081,...

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]252:80

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 154[.]88[.]14[.]34:8443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]75:443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]76[.]79[.]8:80

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – – 265024416449b79960ac63a4934a04ab

February 25, 2023

Score: 1 MALWARE FAMILY: TAGS:MD5: 265024416449b79960ac63a4934a04abSHA1: e37184e090f5c8b2d8ca68804c3b3b4161b35b49ANALYSIS DATE: 2023-02-24T22:59:11ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – 917e23d9af8ffc41f59b222d4d0062b6

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 917e23d9af8ffc41f59b222d4d0062b6SHA1: 40b9dce6353fb98421c7d46f9fb4cdcf0134df94ANALYSIS DATE: 2023-02-24T23:55:39ZTTPS: T1012, T1082, T1005, T1081, T1060,...

Malware Analysis – discovery – 923a5ca3ef3ddec2506d0bffbae51930

February 25, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, persistence, spyware, stealer, trojan, upxMD5: 923a5ca3ef3ddec2506d0bffbae51930SHA1: b616b545db7cdef13318fa82a54ba8ad1878ec62ANALYSIS DATE: 2023-02-24T22:33:40ZTTPS: T1112, T1158, T1042, T1012,...

Malware Analysis – djvu – 67d96d0e3bd084531027da3adb28c196

February 25, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 67d96d0e3bd084531027da3adb28c196SHA1: 8790617b397467bfef79a49572e08c6f0a38df61ANALYSIS DATE: 2023-02-24T23:54:28ZTTPS: T1222, T1005, T1081, T1060, T1112,...

Cobalt Stike Beacon Detected – 118[.]194[.]230[.]222:8443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]94[.]3[.]175:55443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]108:4433

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 142[.]11[.]211[.]228:443

February 25, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

NSA shares guidance on how to secure your home network

February 24, 2023

The U.S. National Security Agency (NSA) has issued guidance to help remote workers secure their home networks and defend their...

VMware warns admins of critical Carbon Black App Control flaw

February 24, 2023

VMware has released a critical security upgrade to address a critical injection vulnerability that impacts several versions of Carbon Black...

New S1deload Stealer malware hijacks Youtube, Facebook accounts

February 24, 2023

An ongoing malware campaign targets YouTube and Facebook users, infecting their computers with a new information stealer that will hijack...

Google paid $12 million in bug bounties to security researchers

February 24, 2023

Google last year paid its highest bug bounty ever through the Vulnerability Reward Program for a critical exploit chain report...

Hackers now exploit critical Fortinet bug to backdoor servers

February 24, 2023

Threat actors are targeting Internet-exposed Fortinet appliances with exploits targeting CVE-2022-39952, an unauthenticated file path manipulation vulnerability in the FortiNAC...

Hackers use fake ChatGPT apps to push Windows, Android malware

February 24, 2023

Threat actors are exploiting the popularity of OpenAI's ChatGPT chatbot to distribute malware for Windows and Android, or direct unsuspecting...

Russian malware dev behind NLBrute hacking tool extradited to US

February 24, 2023

A Russian malware developer accused of creating and selling the NLBrute password-cracking tool was extradited to the United States after...

Clasiopa hackers use new Atharvan malware in targeted attacks

February 24, 2023

Security researchers have observed a hacking group targeting companies in the materials research sector with a unique toolset that includes a...

Fruit giant Dole suffers ransomware attack impacting operations

February 24, 2023

Dole Food Company, one of the world’s largest producers and distributors of fresh fruit and vegetables, has announced that it is...

Pirated Final Cut Pro infects your Mac with cryptomining malware

February 24, 2023

Security researchers discovered a cryptomining operation targeting macOS with a malicious version of Final Cut Pro that remains largely undetected by...

threatintel

Malware Analysis – djvu – 253efb250e4405950a48961913a5ed55

Malware Analysis – redline – 973978433de985f2e501f5a0484b1fc3

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]252:80

Cobalt Stike Beacon Detected – 154[.]88[.]14[.]34:8443

Cobalt Stike Beacon Detected – 37[.]220[.]87[.]75:443

Cobalt Stike Beacon Detected – 45[.]76[.]79[.]8:80

Malware Analysis – – 265024416449b79960ac63a4934a04ab

Malware Analysis – djvu – 917e23d9af8ffc41f59b222d4d0062b6

Malware Analysis – discovery – 923a5ca3ef3ddec2506d0bffbae51930

Malware Analysis – djvu – 67d96d0e3bd084531027da3adb28c196

Cobalt Stike Beacon Detected – 118[.]194[.]230[.]222:8443

Cobalt Stike Beacon Detected – 47[.]94[.]3[.]175:55443

Cobalt Stike Beacon Detected – 45[.]61[.]186[.]108:4433

Cobalt Stike Beacon Detected – 142[.]11[.]211[.]228:443

NSA shares guidance on how to secure your home network

VMware warns admins of critical Carbon Black App Control flaw

New S1deload Stealer malware hijacks Youtube, Facebook accounts

Google paid $12 million in bug bounties to security researchers

Hackers now exploit critical Fortinet bug to backdoor servers

Hackers use fake ChatGPT apps to push Windows, Android malware

Russian malware dev behind NLBrute hacking tool extradited to US

Clasiopa hackers use new Atharvan malware in targeted attacks

Fruit giant Dole suffers ransomware attack impacting operations

Pirated Final Cut Pro infects your Mac with cryptomining malware

HackerOne Bug Bounty Disclosure: stack-buffer-overflow-in-curl-cookie-parsing-leads-to-rce-batuhanilgarr

BugCrowd Bug Bounty Disclosure: P3 – Publicly Editable Google Docs Linked from NASA SnowEx PPT –

BugCrowd Bug Bounty Disclosure: P3 – Details of the collaboration between NASA and Inmarsat Government and the type of contract –

Apple Products Multiple Vulnerabilities

Miljödata – 870,108 breached accounts

You may have missed