MailChimp discloses new breach after employees got hacked
Email marketing firm MailChimp suffered another breach after hackers accessed an internal customer support and account administration tool, allowing the...
threatintel
Hackers push malware via Google search ads for VLC, 7-Zip, CCleaner
Hackers are setting up fake websites for popular free and open-source software to promote malicious downloads through advertisements in Google...
New York man defrauded thousands using credit cards sold on dark web
A New York resident has pleaded guilty to charges of conspiracy to commit bank fraud using stolen credit cards purchased...
Bitzlato crypto exchange seized for ransomware, drugs money laundering
The U.S. Department of Justice arrested and charged Russian national Anatoly Legkodymov, the founder of the Hong Kong-registered cryptocurrency exchange...
Product Security Incident Response: Key Strategies and Best Practices
Written By: Samuel Cure, CISO, AMI In today's digital landscape, it is essential to implement proactive measures to ensure the...
Ukraine links data-wiping attack on news agency to Russian hackers
The Computer Emergency Response Team of Ukraine (CERT-UA) has linked a destructive malware attack targeting the country's national news agency...
Malware Analysis – djvu – 1e12ef6d811ea006a932860cd74b0282
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 1e12ef6d811ea006a932860cd74b0282SHA1: fcbef26773b2ef3a41bf1a74f4ed59233283321dANALYSIS DATE: 2023-01-19T09:27:14ZTTPS: T1130, T1112, T1060, T1222, T1082,...
Cobalt Stike Beacon Detected – 47[.]242[.]164[.]33:9998
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 1[.]117[.]117[.]162:8888
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 202[.]182[.]117[.]134:8087
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 103[.]105[.]49[.]52:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Malware Analysis – vidar – 6fb6025c04ba6fa3d4820aea944e3667
Score: 10 MALWARE FAMILY: vidarTAGS:family:vidar, botnet:408, discovery, persistence, ransomware, spyware, stealerMD5: 6fb6025c04ba6fa3d4820aea944e3667SHA1: b5fa73ed8561665ddaa9b9baecb427dd166d034bANALYSIS DATE: 2023-01-19T09:28:45ZTTPS: T1005, T1081, T1130, T1112, T1082,...
Malware Analysis – djvu – 892865bd136926da1ef72498bb1fb355
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 892865bd136926da1ef72498bb1fb355SHA1: 53103a535dd72d6156b0a2ba739071b98ec549a8ANALYSIS DATE: 2023-01-19T11:02:44ZTTPS: T1012, T1082, T1005, T1081,...
Malware Analysis – djvu – 30f074e92a9351c582e31b3be1e4a6c3
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, botnet:test, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...
Malware Analysis – djvu – 1c7c18d59d23a9901b0e2b8e48dcde2c
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, stealerMD5: 1c7c18d59d23a9901b0e2b8e48dcde2cSHA1: 4579072148edd252a0a6eaa87eea1a0f73599258ANALYSIS DATE: 2023-01-19T11:39:45ZTTPS: T1222, T1082, T1130, T1112, T1060...
BlackCat/ALPHV Ransomware Victim: NextGen
BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...
BlackCat/ALPHV Ransomware Victim: Pharmacare
BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...
BlackCat/ALPHV Ransomware Victim: Fresh Del Monte
BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...
Malware Analysis – – bf9859562a838793808f162f59a451a6
Score: 3 MALWARE FAMILY: TAGS:MD5: bf9859562a838793808f162f59a451a6SHA1: 6edf259df3a9031428ca8a2e56c4da1caff643afANALYSIS DATE: 2023-01-19T03:46:06ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – smokeloader – 0ed65c594991f0a57f7209966ce2c081
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 0ed65c594991f0a57f7209966ce2c081SHA1: 101e646cddf7eb518ed185e1946b3a2715b21057ANALYSIS DATE: 2023-01-19T03:05:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Malware Analysis – djvu – 1e61d2b0a41e30bb734ddbe53bb66880
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 1e61d2b0a41e30bb734ddbe53bb66880SHA1: 26dc0624b6d0286043cf55c3299bd14161f9e19fANALYSIS DATE: 2023-01-19T03:00:52ZTTPS: T1060, T1112, T1012, T1082,...
Malware Analysis – discovery – e2c876ff5b1f24b59d928e595234cdef
Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, evasion, exploit, vmprotectMD5: e2c876ff5b1f24b59d928e595234cdefSHA1: 82d06b09b2a8c514929aab293242d4796d4ee39fANALYSIS DATE: 2023-01-19T04:56:27ZTTPS: T1031, T1562, T1489, T1222, T1112, T1082, T1053, T1102,...
Malware Analysis – – 6e5b443ec0bb37d7d7a332ee1de244b0
Score: 3 MALWARE FAMILY: TAGS:MD5: 6e5b443ec0bb37d7d7a332ee1de244b0SHA1: 0973b62f00138342e2f605fd04fe66a408611ab5ANALYSIS DATE: 2023-01-19T03:49:06ZTTPS: T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known...
Malware Analysis – djvu – 1aef2be1b15c67a54cbc186937e4066d
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, botnet:test, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5:...
