Rezultati pretraživanja
  1. 4. velj

    Today we have received 628 eMails of this malicious campaign! 🙄 Our Feed is full of details! 🤟 Thanks to the whole Twitter community for spreading information and fighting these campaign!

    targets 🇮🇹 from XLS > VBA > DLL hxxps://romaitaliacommerciale.site/etis?<GUID> romaitaliacommerciale].site milanoofficialfatt.]online barifattonumero[.pw officebuysell].pro
    2 proslijeđena tweeta 6 korisnika označava da im se sviđa
  2. 4. velj

    Subject: Sollecito di pagamento - Received From: 93.46.44.198 - Attachment: 579486_sollecito_SOL20A4760324.xls - MD5 Hash: 99C177598FA892CB999816EF94E1D041

    1 proslijeđeni tweet
  3. 4. velj

    2020204 target Italy xls -> wmic -> PowerShell -> xls: Payload from: s://romaitaliacommerciale[.]site/etis?<UUID>(37.221.114[.]86) Ursnif:

    1 reply 2 proslijeđena tweeta 8 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  4. 4. velj

    🇮🇹 from XLS > VBA > DLL c2: 2020lhjfhf.]xyz 2020lplm.]xyz version=214112 server=12 id=2052

    1 reply 10 proslijeđenih tweetova 22 korisnika označavaju da im se sviđa
  5. 4. velj

    targets 🇮🇹 from XLS > VBA > DLL hxxps://romaitaliacommerciale.site/etis?<GUID> romaitaliacommerciale].site milanoofficialfatt.]online barifattonumero[.pw officebuysell].pro

    21 proslijeđeni tweet 29 korisnika označava da im se sviđa
  6. 3. velj

    > (macro) HTML: a5e91dcc988768fe55d10ba1ce6ebef8 (obfuscated JS) --> MalDoc: 3d64db988c898b9232863d1a31674c28 (sleeps ~5 min) --> hxxps://194.36.188[.]132/random.png

    1 reply 1 proslijeđeni tweet 2 korisnika označavaju da im se sviđa
  7. 3. velj

    What kind of malware is dropped by this in Czech?🤔 Is this downloader? Subject: Připomenutí o splacení dluhu FileName: F-44011156.doc

    1 proslijeđeni tweet 9 korisnika označava da im se sviđa
  8. 2. velj

    Kazakstan Bank themed on close from hxxps://nationalbank.bz/Doc/Prikaz.doc PS -> hxxps://wateroilclub.com/file/dwm.exe einmrmdmy.exe 6/68 on VT (SSL) -> formixing[.]com Not sure what this but it crashes in AnyRun or appears to. AnyRun:

  9. 1. velj

    Interesting ! doc -> Macro -> PowerShell -> Shellcode -> ??  …

    1 korisnik označava da mu se sviđa
  10. 1. velj

    doc -> Macro -> Unknown malware (C2 is overflowingmind[.]pw)  …  …

  11. 30. sij

    Interested in learning how to debug macros or learn more about the structure of user forms? In my latest video, I show you how to use the Office IDE to debug a recent

    18 proslijeđenih tweetova 42 korisnika označavaju da im se sviđa
  12. 30. sij

    👾 targets 🇮🇹 hxxps://vedaastrology.com/faktura.zip POST to hxxps://panikolsos.]xyz

    1 reply 25 proslijeđenih tweetova 33 korisnika označavaju da im se sviđa
  13. 19. sij

    compromised Advanced Ortho Center's website and uses (72e371542ad6fda96bb3fc3b1ee68d92) to communicate w/ the C2 server advanceorthocenter[.]com/wp-includes/editor[.]php. . Persistence in the System32 directory.

    1 reply 24 proslijeđena tweeta 49 korisnika označava da im se sviđa
  14. 28. stu 2019.

    Low AV detection leverages hex-encoded content in semantic layer to pivot to Emotet/Trickbot payload hosted on Github. Initial sample: 78 related samples found via context pivot: rule:

    24 proslijeđena tweeta 59 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  15. 4. stu 2019.

    🇮🇹 h/t hxxps://chucelo.fun/nuf[.php<GUID> c2: hxxp://oeurhbf[.xyz

    17 proslijeđenih tweetova 21 korisnik označava da mu se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  16. 31. lis 2019.

    found this on anyrun it starts notepad.exe in the background, and i think it injects a coinminer throttled to 50% cpu

    10 proslijeđenih tweetova 20 korisnika označava da im se sviđa
    Prikaži ovu nit
    Prikaži ovu nit
  17. 21. lis 2019.

    SOC report 10 22 2019.doc Fake Security Operations Center (SOC) report attack. Sample upload at 2019-10-21,So maybe attack Starting at 10-22. Test sample name : Maldoc3 (1),submit from us IOC List:

    1 reply 18 proslijeđenih tweetova 39 korisnika označava da im se sviđa
  18. 23. ruj 2019.

    Did you know that you can protect your VBA code in MS Office documents from being viewable? Here's a walkthrough from our very own Carrie Roberts!

    1 reply 12 proslijeđenih tweetova 26 korisnika označava da im se sviđa
  19. 28. kol 2019.

    dropping VT: 0 / 54 c2: port: 5000 ( c2 is down ) Pass : 201908

    1 reply 15 proslijeđenih tweetova 31 korisnik označava da mu se sviđa
  20. 18. lip 2019.

    Process Spoofing?

    44 proslijeđena tweeta 110 korisnika označava da im se sviđa

Nema rezultata.

Čini se da učitavanje traje već neko vrijeme.

Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.