(1/7) 💡 Illumination of a large resilient infrastructure distributing #NetSupport RAT using:
- Google Ads (malvertising)
- Traffic Distribution System (TDS)
- Fake websites
- MSIX

40+ IP addresses
70+ domain names

IoCs:
gist.github.com/qbourgue/62cee…

twitter.com/Threat_Down/st…

⬇️

VirusTotal query to track part of the recent #malvertising and #seo #poisoning campaigns that eventually distribute #NetSupport

content:{66756e6374696f6e20747261636b506167654f70656e2829207b}

#netsupport #config TomU | I'm still here... til the end 🕊️🇨🇭
#fin7 #APT
5.8.63.[140[:443

♻️app.any.run/tasks/a7482c6d…

➿Samples
bazaar.abuse.ch/browse/tag/5-8…

(6/7) Hunt for possible NetSupport RAT C2 servers using the pattern /fakeurl.htm on urlscan:
urlscan.io/search/#page.u…

⬇️

35 years of experience, trusted by millions! NetSupport ServiceDesk delivers reliable IT support solutions for your corporation. mvnt.us/m2415460 

#ProvenPerformance #DataDrivenDecisions

Track delivery & confirm receipt! NetSupport Notify logs all sent & received messages with detailed reports for accountability. mvnt.us/m2415412 

#TransparencyMatters #InstantAlert

Track delivery & confirm receipt! NetSupport Notify logs all sent & received messages with detailed reports for accountability. mvnt.us/m2415412 

#TransparencyMatters #InstantAlert

HTTP specific response 'Request failed with status code 404' allows tracking of domains related to distribution via malvertising/seo poisoning of #NetSupport

virustotal.com/gui/file/9041d…

cc: rewscel.medium.com/fin7-abusing-m… rewscel

Boost employee skills & performance! NetSupport School delivers engaging & interactive training for your corporate team. mvnt.us/m2415463

#EffectiveTraining #Onboarding

Did you know that NetSupport School, our comprehensive training and onboarding solution, is bundled with NetSupport Manager at no extra cost? Learn more with a free trial! mvnt.us/m2415268

#Training #Onboarding #PIP #EmployeeGrowth

Track delivery & confirm receipt! NetSupport Notify logs all sent & received messages with detailed reports for accountability. mvnt.us/m2415412

#TransparencyMatters #InstantAlert

Track delivery & confirm receipt! NetSupport Notify logs all sent & received messages with detailed reports for accountability. mvnt.us/m2415412

#TransparencyMatters #InstantAlert

Lehrer glücklich, Schüler glücklich, Techniker glücklich! #classroomcloud ist die Geheimwaffe für eine reibungslos funktionierende Schule. mvnt.us/m2415361

Boost employee skills & performance! NetSupport School delivers engaging & interactive training for your corporate team. mvnt.us/m2415463

#EffectiveTraining #Onboarding

35 years of experience, trusted by millions! NetSupport ServiceDesk delivers reliable IT support solutions for your corporation. mvnt.us/m2415460

#ProvenPerformance #DataDrivenDecisions

IT worries keeping you up at night? NetSupport Manager's secure remote IT support lets you sleep soundly, knowing any industry is covered mvnt.us/m2415415

#ITPeaceOfMind #ITSupport #RemoteSupport

Short post on recent #FIN7 activity:

rewscel.medium.com/fin7-abusing-m…

New episode of Insights with NetSupport! Bernie 💙 Author | Speaker tackles #ToxicMasculinity & coercive control. How can we create safer #Workplaces & support positive role models? Listen now! mvnt.us/m2415301 #MentalHealth #Equality

Did you know that NetSupport School, our comprehensive training and onboarding solution, is bundled with NetSupport Manager at no extra cost? Learn more with a free trial! mvnt.us/m2415268

#Training #Onboarding #PIP #EmployeeGrowth