🚨 Healthcare & Public Health Sector orgs❗
Review our latest #cybersecurity advisory on #BlackBasta ransomware containing #TTPs & #IOCs developed with FBI, @HHSgov & Center for Internet Security (CIS)'s MS-ISAC. More info at cisa.gov/news-events/cy… #StopRansomware
👀 🚨- New Recorded Future report! This report, from my colleague Julian-Ferdinand, leverages Recorded Future Network Intelligence to examine the layered infrastructure and evasion techniques employed by SolarMarker. And yes, there are IOCs! recordedfuture.com/exploring-the-…
Hello everyone,
We are happy to share with you fresh #Darkgate IOCs.
eml > pdf > geofenced URL > jar > ps > zip > autoit3.exe & malicious a3x script
#IOCs :
- afarm[.]net
- adventsales[.]co[.]uk
#malware #threatintel #emailsecurity
![Hello everyone,
We are happy to share with you fresh #Darkgate IOCs.
eml > pdf > geofenced URL > jar > ps > zip > autoit3.exe & malicious a3x script
#IOCs:
- afarm[.]net
- adventsales[.]co[.]uk
#malware #threatintel #emailsecurity](https://pbs.twimg.com/media/GNJwapgWIAAsYCG.png "Perception Point Attack Trends (@AttackTrends) on Twitter photo 2024-05-09 17:02:55 Hello everyone,
We are happy to share with you fresh #Darkgate IOCs.
eml > pdf > geofenced URL > jar > ps > zip > autoit3.exe & malicious a3x script
#IOCs:
- afarm[.]net
- adventsales[.]co[.]uk
#malware #threatintel #emailsecurity")
Ready to create detection/hunt rule for Sublime Security as soon as there is more info / IOCs.
![🚨 Phishing PDF File Evaded Nearly All the AV Solutions 🚨
📌 VT Detection: 7 / 65
📁 Filename: Fnb Payment.pdf
🔐 MD5: ba6039f82e0f08711279adc9f4e9f92a
🕵️♂️ IOCs:
- https[:]//wearned.com/
DOCGuard Report: app.docguard.io/65d070b5c2e867…](https://pbs.twimg.com/media/GNJSKnQWIAADuf7.png "DOCGuard - Detect Maldocs in Seconds! (@doc_guard) on Twitter photo 2024-05-09 14:50:39 🚨 Phishing PDF File Evaded Nearly All the AV Solutions 🚨
📌 VT Detection: 7 / 65
📁 Filename: Fnb Payment.pdf
🔐 MD5: ba6039f82e0f08711279adc9f4e9f92a
🕵️♂️ IOCs:
- https[:]//wearned.com/
DOCGuard Report: app.docguard.io/65d070b5c2e867…")
![999 protected folders + 2 rar containing same configuration related files
Opendir http[:]//173[.]232[.]109[.]208[.]host[.]secureserver[.]net/entrada/ used to scam/phishing companies in name of Banco Bradesco.
GoDaddy.com, LLC
AS26496
More IOCs below & images.](https://pbs.twimg.com/media/GM-IeZAWoAEAwVm.png "kddx00 (@kddx0178318) on Twitter photo 2024-05-07 11:11:10 999 protected folders + 2 rar containing same configuration related files
Opendir http[:]//173[.]232[.]109[.]208[.]host[.]secureserver[.]net/entrada/ used to scam/phishing companies in name of Banco Bradesco.
GoDaddy.com, LLC
AS26496
More IOCs below & images.")
![🚨 Phishing PDF File Evaded All the AV Solutions 🚨
📌 VT Detection: 1 / 63
📁 Filename: EFT-Payment.pdf
🔐 MD5: 12d4c4978092229073cf4d4d57729f2e
🕵️♂️ IOCs:
- https[:]//bafkreig6e4hmlnuktybscumout2n4ntbka34db5vtscvx5tknmzs3h5bsu.ipfs.cf-ipfs.com/
DOCGuard Report:](https://pbs.twimg.com/media/GMkPZnBWgAAaChz.png "DOCGuard - Detect Maldocs in Seconds! (@doc_guard) on Twitter photo 2024-05-02 10:14:08 🚨 Phishing PDF File Evaded All the AV Solutions 🚨
📌 VT Detection: 1 / 63
📁 Filename: EFT-Payment.pdf
🔐 MD5: 12d4c4978092229073cf4d4d57729f2e
🕵️♂️ IOCs:
- https[:]//bafkreig6e4hmlnuktybscumout2n4ntbka34db5vtscvx5tknmzs3h5bsu.ipfs.cf-ipfs.com/
DOCGuard Report:")
⚠️TweetFeed⚠️collects Indicators of Compromise (IOCs) shared by the infosec community on Twitter. Here you will find malicious URLs, domains, IPs, & SHA256/MD5 hashes. Link in sub-post.👇
#TweetFeed #OSINT #CTI #Clearnet #DarkWeb #DarkWeb Informer #Cybercrime #Cybersecurity
![🚨 Phishing HTML File Evaded Most of the AV Solutions 🚨
📌 VT Detection: 2 / 60
📁 Filename: Attach.html
🔐 MD5: 50bb75d6e28550c7639975d5d3d56d61
🕵️♂️ IOCs:
- https[:]//bc1q7syczyekazugzppa6kcse4n.com/
DOCGuard Report: app.docguard.io/d2f166b0669a67…](https://pbs.twimg.com/media/GNJSsoPXQAA5UIi.jpg "DOCGuard - Detect Maldocs in Seconds! (@doc_guard) on Twitter photo 2024-05-09 14:55:46 🚨 Phishing HTML File Evaded Most of the AV Solutions 🚨
📌 VT Detection: 2 / 60
📁 Filename: Attach.html
🔐 MD5: 50bb75d6e28550c7639975d5d3d56d61
🕵️♂️ IOCs:
- https[:]//bc1q7syczyekazugzppa6kcse4n.com/
DOCGuard Report: app.docguard.io/d2f166b0669a67…")
![🚨 Pakistan Prime Minister's Office Themed Phishing PDF File Evaded All the AV Solutions 🚨
📌 VT Detection: 0 / 63
📁 Filename: Outstanding Payment of Tender upload fee - PPRA.pdf
🔐 MD5: d4eb4cee8aeb6f2ea36afadeda9dbb23
🕵️♂️ IOCs:
- http[:]//docs.mofa-services-server.top/
-](https://pbs.twimg.com/media/GMcYVNvXcAAWi0o.png "DOCGuard - Detect Maldocs in Seconds! (@doc_guard) on Twitter photo 2024-04-30 21:35:56 🚨 Pakistan Prime Minister's Office Themed Phishing PDF File Evaded All the AV Solutions 🚨
📌 VT Detection: 0 / 63
📁 Filename: Outstanding Payment of Tender upload fee - PPRA.pdf
🔐 MD5: d4eb4cee8aeb6f2ea36afadeda9dbb23
🕵️♂️ IOCs:
- http[:]//docs.mofa-services-server.top/
-")
