R.
@0xrb
Reverse Threat Intel | Malware /Threat Hunter | Exploit Research \\ #IoT #Malware #Research, Reverse Engineering, #Botnet C2 #Hijacking
ID: 155844379
https://www.virustotal.com/en/user/0xrb/ 15-06-2010 09:01:15
5,5K Tweet
5,5K Followers
1,1K Following
![๐จ Found Another ๐๐ฐ๐๐ถ๐๐ฒ #SystemBC #Malware spreading from ON-LINE-DATA server in Netherlands (AS204601).
C2 IP:
cobusabobus[.]cam:4001 / 212.162.153.199
Malware Hash:
0dd1f6c2b9bf477115701a1340d8d9a2
81 Victims Confirmed ๐
Stay vigilant! ๐ก๏ธ #threatintel](https://pbs.twimg.com/media/GO0BwsragAAXMCb.png "R. (@0xrb) on Twitter photo ๐จ Found Another ๐๐ฐ๐๐ถ๐๐ฒ #SystemBC #Malware spreading from ON-LINE-DATA server in Netherlands (AS204601).
C2 IP:
cobusabobus[.]cam:4001 / 212.162.153.199
Malware Hash:
0dd1f6c2b9bf477115701a1340d8d9a2
81 Victims Confirmed ๐
Stay vigilant! ๐ก๏ธ #threatintel")
![๐จ Found a new IP ๐๐ฐ๐๐ถ๐๐ฒ #SystemBC #Malware spreading from AS-CHOOPA, US (AS20473), USA ๐บ๐ธ
Command & Control IP:
64.176.194.7[:]443
Malware Hash:
ecf61801ede927c82dcd89228dfe0a75
10 Victims Confirmed ๐
Stay sharp and stay safe! ๐ก๏ธ #threatintel](https://pbs.twimg.com/media/GO0MZ87aUAAiLXT.png "R. (@0xrb) on Twitter photo ๐จ Found a new IP ๐๐ฐ๐๐ถ๐๐ฒ #SystemBC #Malware spreading from AS-CHOOPA, US (AS20473), USA ๐บ๐ธ
Command & Control IP:
64.176.194.7[:]443
Malware Hash:
ecf61801ede927c82dcd89228dfe0a75
10 Victims Confirmed ๐
Stay sharp and stay safe! ๐ก๏ธ #threatintel")
โ๐๐จ๐ฐ ๐ฆ๐๐ง๐ฒ ๐๐๐๐ฌ ๐๐จ ๐ฒ๐จ๐ฎ ๐ญ๐ก๐ข๐ง๐ค ๐ฐ๐ข๐ฅ๐ฅ ๐๐ ๐ฉ๐ฎ๐๐ฅ๐ข๐ฌ๐ก๐๐ ๐ญ๐ก๐ข๐ฌ ๐ฒ๐๐๐ซ?โ Great post on the forecast of the CVEs per month/year punctually exceeded by the final. H/T Pierluigi Paganini - Security Affairs jerrygamblin.com
๐จ Recent ๐๐ฐ๐๐ถ๐๐ฒ #SystemBC #Malware Commonly used in ransomware campaigns, spreading from Ukraine (UA). C2 IP: 185.156.72.33[:]4001 Hash: a022626b818bb6251e3b814ae74700e0 Compromised machines (bots) detected also in mostly Ukraine itself ๐ (32 Victims) ๐ก๏ธ #threatintel
![๐จ Recent ๐๐ฐ๐๐ถ๐๐ฒ #SystemBC #Malware Commonly used in ransomware campaigns, spreading from Ukraine (UA).
C2 IP: 185.156.72.33[:]4001
Hash: a022626b818bb6251e3b814ae74700e0
Compromised machines (bots) detected also in mostly Ukraine itself ๐ (32 Victims)
๐ก๏ธ #threatintel](https://pbs.twimg.com/media/GQAeWtybEAAWdRY.png "R. (@0xrb) on Twitter photo ๐จ Recent ๐๐ฐ๐๐ถ๐๐ฒ #SystemBC #Malware Commonly used in ransomware campaigns, spreading from Ukraine (UA).
C2 IP: 185.156.72.33[:]4001
Hash: a022626b818bb6251e3b814ae74700e0
Compromised machines (bots) detected also in mostly Ukraine itself ๐ (32 Victims)
๐ก๏ธ #threatintel")
๐จAlert๐จCVE-2024-30103: Microsoft Outlook Remote Code Execution Vulnerability โ This Microsoft Outlook vulnerability can be circulated from user to user and doesnโt require a click to execute. Rather, execution initiates when an affected email is opened.This is notably dangerous
