The Momentum #botnet uses 36 different methods to launch #DDoS. Nice summary GBHackers on Security ! @dvk01uk James @JAMESWT_M malware_traffic Racco42 @makflwana \_(ʘ_ʘ)_/ Antelox Bad Packets by Okta hazmalware Artsiom Holub

2021-04-06: 🕶️🆕Introducing #Hancitor Loader aka "#MASSLOADER" Internal Project Name⚙️ 📧Spam: DocuSign Theme➡️Google Doc 🤔Filling in King #Emotet Loader King Void in 2021 Fueling High-Value Target Ransomware? ↘️Still largely same (➕ new "&EXT=" URI) vkremez.com/2018/11/lets-l…

for tracking.. #ursnif #isfb version:2.50 build:196 group:8877 [May 5 2021][30218409ILPAJDUR][/greed/] MB:50a299d1e92d9205e123404c8e05904d Felix Vitali Kremez hazmalware Artsiom Holub abuse.ch malware_traffic ioc 👇

🔥#Clop Ransomware (CryptoMix) Linked Operation Takedown: From unknown ransomware, only MalwareHunterTeam and I tracked early in 2019 as a signed malware - turned to be multimillion operation with ... Tesla car & lavish lifestyle github.com/k-vitali/crypt… youtube.com/watch?v=PqGaZg…

Correction on sample: This is not an APT28 sample. Apologies This was written by a dev at Meresburg University. There is also several ransomware samples written by them on VT as well. APT28/FANCY BEAR Zekapab CSharp Implant bc388933d56e7a7d3e2b6c97c5819539 virustotal.com/gui/file/c25e5…

An #unkown #keylogger and #stealer in vb6: app.any.run/tasks/f403243a…

tracking.. #ursnif #isfb version:2.50 build:207 group:8877 [30218409ILPAJDUR][Jul 5 2021][/images/] MB:0d68d238d713f63ff02be916ae633466 MalwareHunterTeam James JAMESWT_MHT malware_traffic Racco42 @makflwana \_(ʘ_ʘ)_/ Bad Packets by Okta hazmalware Artsiom Holub ioc 👇

New releases: #PESieve/#HollowsHunter 0.3.0: github.com/hasherezade/pe… & github.com/hasherezade/ho… - among the new features: i.e. the support for the scan on inaccessible pages

QakBot + FeodoTracker = 💥 Feodo Tracker is now tracking #QakBot botnet C2s 🥳 👉 feodotracker.abuse.ch/browse/qakbot/ If you are already using Feodo Tracker's blocklist you automatically receive protection against QakBot botnet C2 traffic 🐸🔥 👉 feodotracker.abuse.ch/downloads/ipbl…

Lots going in with logj4 but don't forget to look at the new patch Tuesday from Microsoft Threat Intelligence Includes CVE-2021-43890 Windows AppX being exploited in the wild.

tracking.. #ursnif #isfb version:2.60 build:222 group:8899 [56473871MNTYAIDA][Dec 6 2021] ac57d694b86d8532b38d3d62f6de3afc Felix Vitali Kremez hazmalware Artsiom Holub abuse.ch malware_traffic

I don’t have a SoundCloud, but if you want to click on something, it would be pretty great if you decided to help out some fellow Americans in dire need right now: secure.kentucky.gov/formservices/F…

tracking.. #ursnif #isfb version:2.60 build:224 group:20000 [gs0W1Y167ccgpQOG][Dec 26 2021][/drew/] #⃣b6f0fc5638a110abac1a54805f77e786 Felix Vitali Kremez hazmalware Artsiom Holub abuse.ch malware_traffic

tracking.. #ursnif #isfb version:2.50 build:225 group:7579 [IL2ue0q04g35Es2C][/drew/][Feb 1 2022] #⃣1fb95166dda235cb6e5279db1b72722a Felix Vitali Kremez hazmalware Artsiom Holub abuse.ch malware_traffic

nice catch! tracking #ursnif #isfb version:2.50 build:239 group:3000 [Jun 22 2022][WJWoBDOsnmP2wric][/drew/] 5382ef90ef9a33baca2ed2119059154f ioc down here 👇🧐 Felix avman hazmalware Artsiom Holub abuse.ch malware_traffic

Mentioned Samples + ⚠️extra 👇 bazaar.abuse.ch/browse/tag/116… #opendir 💠116.203.19.]97/1/ + ⚠️https://raw.githubusercontent.]com/alibaba2044/hauL2/main/wininfo64.zip 🆘https://github].com/alibaba2044?tab=repositories 👇 bazaar.abuse.ch/browse/tag/git… cc reecDeep James

TomU | I'm still here... til the end 🕊️🇨🇭 is not new is a VBS that load AgentTesla and use telegram as C2

👀

#Bumblebee Infection Flow TTPs🐝 [+] Mark-of-the-Web Bypass: IMG (T1553.005) [+] Malicious File: LNK (T1204.002) [+] Windows Command Shell: BAT (T1059.003) [+] Rename System Utilities: copy & rename (T1036.003) [+] Scheduled Task: schtasks.exe (T1053.005) [+] Rundll32(T1218.011)

🔴We are live rn! Join us with special guest Duncan Ogilvie 🍍 for a deep dive into hacking #ChatGPT Let’s see far off the rails we can push this thing! twitch.tv/oalabslive