MalWebHunter
@malwebhunter
OSCP | Forensic Computing | Security Researcher | Threat Hunter | Cyber Security Analyst | Penetration Tester
ID: 847813680003600384
31-03-2017 14:11:47
495 Tweet
524 Followers
158 Following
🔥👾 (finally) a macOS implant that support direct in-memory execution of remote payloads! New blog post: "Lazarus Group Goes 'Fileless' objective-see.com/blog/blog_0x51… H/T Dinesh_Devadoss
![#diamondFox #malware C2 panel:
windowsupdates.systeminternal.r87.]online/r87/
md5: 92dab3028d2937b093511f300ad169bf](https://pbs.twimg.com/media/EM00hX1X0AALmwq.png "Dee (@viriback) on Twitter photo #diamondFox #malware C2 panel:
windowsupdates.systeminternal.r87.]online/r87/
md5: 92dab3028d2937b093511f300ad169bf")
#Borr #Malware #stealer + #loader C2 Panels 5.188.60.]59/auth.php 5.188.60.]21/auth.php tracking45-website.]com/auth.php 5.188.60.]58/auth.php Thx to @benkow_ for finding these initially. not found samples yet. cc: James Jake | JCyberSec_ prsecurity_ MalwareHunterTeam
![#Borr #Malware #stealer + #loader C2 Panels
5.188.60.]59/auth.php
5.188.60.]21/auth.php
tracking45-website.]com/auth.php
5.188.60.]58/auth.php
Thx to @benkow_ for finding these initially.
not found samples yet.
cc: <a href="/James_inthe_box/">James</a> <a href="/JCyberSec_/">Jake | JCyberSec_</a> <a href="/prsecurity_/">prsecurity_</a> <a href="/malwrhunterteam/">MalwareHunterTeam</a>](https://pbs.twimg.com/media/EPcztOQUYAEhr2U.png "Dee (@viriback) on Twitter photo #Borr #Malware #stealer + #loader C2 Panels
5.188.60.]59/auth.php
5.188.60.]21/auth.php
tracking45-website.]com/auth.php
5.188.60.]58/auth.php
Thx to @benkow_ for finding these initially.
not found samples yet.
cc: <a href=\"/James_inthe_box/\">James</a> <a href=\"/JCyberSec_/\">Jake | JCyberSec_</a> <a href=\"/prsecurity_/\">prsecurity_</a> <a href=\"/malwrhunterteam/\">MalwareHunterTeam</a>")
