threatintel

Malware Analysis – djvu – afd8945316aedd2fb57dd654431c26ba

March 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: afd8945316aedd2fb57dd654431c26baSHA1: f49694b571523786df36ab5d711dc5ea91ef878fANALYSIS DATE: 2023-03-29T17:52:09ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 15a5bb819748cdec8893209495776408

March 29, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, discovery, persistence, ransomware, spyware, stealerMD5: 15a5bb819748cdec8893209495776408SHA1: da3561824dbab0b96c63a5cfd2f364364216ea0aANALYSIS DATE: 2023-03-29T16:31:20ZTTPS: T1060, T1112, T1082, T1053,...

Malware Analysis – amadey – 941ebdb94364e7958adc8638cb5dd933

March 29, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:redline, family:smokeloader, family:vidar, botnet:5df88deb5dde677ba658b77ad5f60248, botnet:pub1, botnet:rober, backdoor, discovery, evasion, infostealer, persistence, ransomware, spyware, stealer,...

threatintel

Malware Analysis – djvu – afd8945316aedd2fb57dd654431c26ba

Malware Analysis – djvu – 15a5bb819748cdec8893209495776408

Malware Analysis – amadey – 941ebdb94364e7958adc8638cb5dd933

Mélofée: Researchers Uncover New Linux Malware Linked to Chinese APT Groups

Spyware Vendors Caught Exploiting Zero-Day Vulnerabilities on Android and iOS Devices

Trojanized TOR Browser Installers Spreading Crypto-Stealing Clipper Malware

How to Build a Research Lab for Reverse Engineering — 4 Ways

Smart Mobility has a Blindspot When it Comes to API Security

LockBit 3.0 Ransomware Victim: nts[.]go[.]kr

Brute Ratel C4 Detected – 54[.]65[.]93[.]113:80

North Korean APT43 Group Uses Cybercrime to Fund Espionage Operations

Karakurt Ransomware Victim: MICROFINANCE INSTITUTION

Latitude Financial data breach now impacts 14 million customers

Trojanized Tor browsers target Russians with crypto-stealing malware

Crown Resorts confirms ransom demand after GoAnywhere breach

Newly exposed APT43 hacking group targeting US orgs since 2018

The End-User Password Mistakes Putting Your Organization at Risk

WiFi protocol flaw allows attackers to hijack network traffic

RansomHouse Ransomware Victim: AV Industries

US-CERT Vulnerability Summary for the Week of March 20, 2023

Where SSO Falls Short in Protecting SaaS

Microsoft Introduces GPT-4 AI-Powered Security Copilot Tool to Empower Defenders

IcedID Malware Shifts Focus from Banking Fraud to Ransomware Delivery

Pakistan-Origin SideCopy Linked to New Cyberattack on India’s Ministry of Defence

[QILIN] – Ransomware Victim: Rex-Hide

CVE Alert: CVE-2025-4519 – themeatelier – IDonate – Blood Donation, Request And Donor Management System

CVE Alert: CVE-2025-5483 – niaj – Connector Wizard (formerly LC Wizard)

[STORMOUS] – Ransomware Victim: www[.]marjane[.]ma

Synthient Credential Stuffing Threat Data – 1,957,476,021 breached accounts

You may have missed