my tweets are severely limited by my lack of understanding of what I am doing.
Sounds like someone could trivially disrupt with a cleaner if they were so inclined
The Emotet payload distribution method is super insecure, they deploy an open source webshell off Github into the Wordpress sites they hack, all with the same password, so anybody can change the payloads infected PCs are receiving.
-
-
-
This Tweet is unavailable.
- Show replies
New conversation -
-
-
Could this be done for Plausible deniability reasons or is it just shoddy coding do you think?
-
I think it's just minimum viable product more than anything, they've just done whatever works easiest it appears.
- Show replies
New conversation -
-
-
It sounds like it is morally wrong to just stand with our hands crossed and wait for sinkhole to be initiated. Pls release our Judge Dredd powered wordpress cleaner
Thanks. Twitter will use this info to make your timeline better. UndoUndo
-
-
-
This Tweet is unavailable.
-
There's a couple of different passwords, I have 3 so far. My latest honeypot, Wordpress :D
- Show replies
-
-
-
Tell me please that the password is not: admin:admin or Emotet:Emotet
-
New conversation -
-
-
Nah they don't. The shells are bought in bulk from 3rd parties and have all kinds of different URIs / passwords. It would be extremely difficult to consistently replace the payloads enough to do any damage.
-
I think me and
@Secu0133 are seeing the same passwords in use :D but it would make sense they've got other people doing the access - Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.