Month: January 2023

BlackCat/ALPHV Ransomware Victim: CHARLES P VONDERHAAR CPA WAS HACKED[.] MORE TNAH 50GB SENSETIVE DATA LEAKED[.]CHARLES P VONDERHAAR CPA WAS HACKED[.] MORE TNAH 50GB SENSETIVE DATA LEAKED[.]

January 27, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

BlackCat/ALPHV Ransomware Victim: SOLAR INDUSTRIES INDIA WAS HACKED[.] MORE THAN 2TB SECRET MILITARY DATA LEAKED

January 27, 2023

BlackCat / ALPHV Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

vice ransomware

Vice Society Ransomware Victim: Bristol Community College

January 27, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Strike

Cobalt Stike Beacon Detected – 179[.]43[.]156[.]134:4443

January 27, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 137[.]220[.]135[.]200:6789

January 27, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 81[.]68[.]253[.]13:7090

January 27, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 35[.]168[.]128[.]144:443

January 27, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 43[.]139[.]187[.]23:2095

January 27, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 18[.]176[.]136[.]197:443

January 27, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Strike

Cobalt Stike Beacon Detected – 140[.]238[.]17[.]238:8899

January 27, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

abstract malware 990x400 1

Malware Analysis – smokeloader – 642b210cce1c89ac83f1f9ba777f49a1

January 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 642b210cce1c89ac83f1f9ba777f49a1SHA1: bd5b60a4ff9443b6551028d939a60085942f8907ANALYSIS DATE: 2023-01-26T21:08:04ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

abstract malware 990x400 1

Malware Analysis – – e82832cee58d74893e194151ba796f7d

January 27, 2023

Score: 6 MALWARE FAMILY: TAGS:MD5: e82832cee58d74893e194151ba796f7dSHA1: 9febbd7d5f50a1e9876c48ac3cbe291ac1c71673ANALYSIS DATE: 2023-01-26T22:16:05ZTTPS: T1112, T1102 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

abstract malware 990x400 1

Malware Analysis – smokeloader – a20c37f0c60ef053496b556da096cea7

January 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: a20c37f0c60ef053496b556da096cea7SHA1: f1190e42f369e1f83a12c1a2f88de2c094fe947fANALYSIS DATE: 2023-01-26T22:36:05ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

abstract malware 990x400 1

Malware Analysis – phobos – b3c9270aea86b5cccc82c0afeff6460a

January 27, 2023

Score: 10 MALWARE FAMILY: phobosTAGS:family:phobos, evasion, persistence, ransomware, spyware, stealerMD5: b3c9270aea86b5cccc82c0afeff6460aSHA1: eb75b5f2207c576d72c17a85fef939fd657ecaaeANALYSIS DATE: 2023-01-26T23:14:08ZTTPS: T1490, T1059, T1107, T1060, T1112, T1031,...

abstract malware 990x400 1

Malware Analysis – smokeloader – 55ce7bedbb562c58727b47abef769f27

January 27, 2023

Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 55ce7bedbb562c58727b47abef769f27SHA1: d2625eca492c2b43189febfb16c1ecbda5be6fdaANALYSIS DATE: 2023-01-26T23:33:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

abstract malware 990x400 1

Malware Analysis – djvu – 38fcf041ee6209342522ee5e9cc87bf5

January 27, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 38fcf041ee6209342522ee5e9cc87bf5SHA1: 9dd0f6e3460dab3d2183c7935f4a2034820b00d0ANALYSIS DATE: 2023-01-26T23:31:22ZTTPS: T1082, T1053, T1005, T1081,...

abstract malware 990x400 1

Malware Analysis – evasion – 00c34bd8bd72d2efdd70fe6737687246

January 27, 2023

Score: 9 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomwareMD5: 00c34bd8bd72d2efdd70fe6737687246SHA1: 165c93db4ef01a071281c7b334a8bd940d53d45fANALYSIS DATE: 2023-01-26T23:57:02ZTTPS: T1490, T1060, T1112, T1031, T1562, T1489 ScoreMeaningExample10Known badA malware...

CISA

CISA: JCDC Announces 2023 Planning Agenda

January 26, 2023

JCDC Announces 2023 Planning Agenda Today, the Joint Cyber Defense Collaborative (JCDC) announced its 2023 Planning Agenda. This release marks...

abstract malware 990x400 1

Malware Analysis – djvu – ff811751380e00d1e0f9a43645c6155e

January 26, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, stealer, trojan, vmprotectMD5: ff811751380e00d1e0f9a43645c6155eSHA1: 997b34aa9abd66c83ef06e49032385dc53e55338ANALYSIS DATE: 2023-01-26T15:03:14ZTTPS: T1012,...

abstract malware 990x400 1

Malware Analysis – discovery – e9aa3add39a7cd937c7f2886602ce9b1

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, persistence, ransomwareMD5: e9aa3add39a7cd937c7f2886602ce9b1SHA1: 7f161fe9e9693238ae82e8c07600716e6959b740ANALYSIS DATE: 2023-01-26T16:02:00ZTTPS: T1082, T1012, T1060 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

abstract malware 990x400 1

Malware Analysis – discovery – 1800fe2f1abdc23120b03b7b3630fa1d

January 26, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 1800fe2f1abdc23120b03b7b3630fa1dSHA1: 69f87b010a46c77e3aa93507e422f7781922b937ANALYSIS DATE: 2023-01-26T15:08:24ZTTPS: T1082, T1012 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Royal Ransomware Victim: ServiceMaster

January 26, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Royal Ransomware Victim: Travis County Sheriffs Officers Association

January 26, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

hackerone

HackerOne Bug Bounty Disclosure: github-apps-can-use-scoped-user-to-server-tokens-to-obtain-full-access-to-user’s-projects-in-project-v2-graphql-apibyahacker1

January 26, 2023

Programme HackerOne GitHub GitHub Submitted by ahacker1 ahacker1 Report Github Apps can use Scoped-User-To-Server Tokens to Obtain Full Access to...

hackerone

HackerOne Bug Bounty Disclosure: std-process-command-batch-files-argument-escaping-could-be-bypassed-with-trailing-whitespace-or-periods–xpl-r-r

November 22, 2024

[LOCKBIT3] – Ransomware Victim: madison-home[.]com

November 22, 2024

[CHORT] – Ransomware Victim: sheboyganwi[.]gov

November 22, 2024

[QILIN] – Ransomware Victim: Zimmerman & Frachtman PA Law Firm

November 22, 2024

[QILIN] – Ransomware Victim: Calvert Home Mortgage Investment

November 22, 2024