'Fw: Copia de transferencia bancaria'

malspam campaign distributing .7z archive that contains inside of it .NET loader which loads #MassLogger malware.

both initial loader and the logger itself can be found here:
bazaar.abuse.ch/browse/tag/Mas…

haven't seen masslogger in a while...

#PowerShell and #reflection again in action 😊 #Masslogger config extraction in minute 🙏🫡🥳
#dotnet 💙

Script + comments again available here:
gist.github.com/Dump-GUY/7114b…

Bypassing MassLogger Anti-Analysis — a Man-in-the-Middle Approach fireeye.com/blog/threat-re… #ReverseEngineering #Malware #Flare #CyberSecurity #Infosec

نشرة الأخبار الأسبوعية حول الأمن السيبراني من #عمان_داتا_بارك عبر #الشبيبة :

🔹برمجيات ضارة تستهدف معالج أبل الجديد

🔹ثغرات أمنية في SHAREit

🔹Masslogger يعود لأستهداف أنظمة ويندوز

Oman Data Park

#opendir #masslogger #agenttesla

hxxp://awa-kenya[.]com/Img/

I published an article at GDATA Cyberdefense AG about the .NET Malware MassLogger

#malware analysis #malware #reverseengineering #masslogger

gdatasoftware.com/blog/2020/06/3…

#Masslogger #Malware hosted on #OpenDir with #Upload option
http[:]//deltacontrol.net.pk/cpp/ an #Pakistan firm

C2: mail[.]privateemail.com-seen in #AgentTesla #hawkeye

James JAMESWT MalwareHunterTeam Brad Florian Roth Vitali Kremez Malwrologist Few Atoms

Malware targeting new Apple processor, SHAREit has vulnerabilities , and Masslogger returning to target Windows systems

Oman Data Park

#malspam #MassLogger v2.0.0.0

C2:
mail.markhamautoglass[.]ca

DropURL:
hxxp://donya-almesmar[.]com/vendor/symfony/filesystem/Tests/micc[.]exe

app.any.run/tasks/c6957bea…

#malware #MassLogger #panel
Panel: //yatesassociates.co[.]za/panel/
Samples in opendir: //searisevet[.]com/asdmins/

abuse.ch MalwareHunterTeam JAMESWT Jake | JCyberSec_ Spam404

109.206.241[.81/htdocs/ #opendir 465 samples
#AsyncRAT #njRAT #Formbook #RemcosRAT #AgentTesla #RecordBreaker #NetWire #orcusrat #StormKitty #RedLineStealer #MassLogger #vjw0rm
#AveMariaRAT #a310Logger #QuasarRAT etc
👇
urlhaus.abuse.ch/host/109.206.2…
👇Backup👇
bazaar.abuse.ch/sample/7bb432c…

Added maldoc templates from Feb 22 - 26.

Families: SilentBuilder, TrickBot, Hancitor, Dridex, AsyncRAT, Quakbot, MassLogger, Formbook

github.com/jstrosch/malwa…

More attachments, more success? 🤷‍♂️ Masslogger: tria.ge/210125-hre94gw… Azorult EXE: tria.ge/210125-wskyly3… Azorult maldoc: tria.ge/210125-wskyly3…

Masslogger Trojan Upgraded to Steal All Your Outlook, Chrome Credentials j.mp/3aPeluS
#Infosec #CyberSecurity #CyberAttack #Hacking #Privacy #Threat #Malware #Ransomware #Cyberwarning #Phishing #SpyWare #Tech #Tech nology

Masslogger campaigns exfiltrates user credentials dlvr.it/Rv05K9 #cyber #threathunting #infosec

👇Masslogger Swipes Microsoft Outlook, Google Chrome Credentials
buff.ly/3qwIAfj

#microsoft #google #chrome #outlook #ip #ip address #ip leak #cyber security #cyber attack #cyber #security #malware #vpn #skyvpn #cyber crime #threats #hackers #databreachs #infosec #netsec

Masslogger Trojan Upgraded to Steal All Your Outlook, Chrome Credentials

#cybersecurity #riskmanagement #phishing #malware #Infosec
#cyberthreats #ramsomware #hacking #dataprotection #privacy
#dataleak #informationsecurity #cyberattacks #databreach

bit.ly/3azCVQf

Hey! Wanna make your malware analysis wider? Use ANYRUNs interactivity! #Masslogger sends auth info in plain text. Copy&paste domain, login&password through Remote ClipBoard and collect info about infected systems!
Thanks James for the sample! app.any.run/tasks/774c4490…

#malspam

ヘルプファイル(.chm)経由でのpowershell実行

ペイロードは #agenttesla
tria.ge/210415-69etdxa…

先月見かけたときのペイロードはMassLoggerでした

#Masslogger #Malware by #Guloader #CloudEye

➡️hxxps://www.med-luxury-apartment.gr/masslogg.deploy

🔥c2 via FTP:
fxp://st05[.]net
2nd11[@]st05[.]net

#CyberSec #infosec urity #infosec