Month: February 2023

abstract-malware-990x400-1

Malware Analysis – play – 223eff1610b432a1f1aa06c60bd7b9a6

February 7, 2023

Score: 10 MALWARE FAMILY: playTAGS:family:play, ransomware, spyware, stealerMD5: 223eff1610b432a1f1aa06c60bd7b9a6SHA1: 14177730443c65aefeeda3162b324fdedf9cf9e0ANALYSIS DATE: 2023-02-07T04:27:17ZTTPS: T1012, T1120, T1082, T1005, T1081 ScoreMeaningExample10Known badA malware...

Read More

abstract-malware-990x400-1

Malware Analysis – djvu – bb3ab1eefcaf81e64610d3a0c62cd760

February 7, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: bb3ab1eefcaf81e64610d3a0c62cd760SHA1: 59a0c4bfd9637e9185d7490fb0626ae818db30a4ANALYSIS DATE: 2023-02-07T05:49:45ZTTPS: T1053, T1012, T1082, T1060,...

Read More

HIBP-Banner-1

LimeVPN – 23,348 breached accounts

February 7, 2023

HIBP In October 2020, the VPN provider LimeVPN suffered a data breach that exposed the personal information of tens of...

Read More

play_news_ransomware

Play Ransomware Victim: L?? C??e

February 7, 2023

Play News Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Read More

play_news_ransomware

Play Ransomware Victim: ?C?

February 7, 2023

Play News Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Read More

Cobalt-Strike

Cobalt Stike Beacon Detected – 84[.]32[.]131[.]91:8080

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Read More

Cobalt-Strike

Cobalt Stike Beacon Detected – 20[.]211[.]120[.]220:80

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Read More

Cobalt-Strike

Cobalt Stike Beacon Detected – 91[.]215[.]85[.]176:83

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Read More

Cobalt-Strike

Cobalt Stike Beacon Detected – 81[.]161[.]229[.]119:10443

February 7, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Read More

LockBit 3.0 Ransomware Victim: nicklaus[.]com

February 6, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Read More

LockBit 3.0 Ransomware Victim: etbrick[.]com

February 6, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Read More

LockBit 3.0 Ransomware Victim: crispinvalve[.]com

February 6, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Read More

LockBit 3.0 Ransomware Victim: prlabs[.]com

February 6, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Read More

LockBit 3.0 Ransomware Victim: wcinet[.]com

February 6, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Read More

LockBit 3.0 Ransomware Victim: hkri[.]com

February 6, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Read More

LockBit 3.0 Ransomware Victim: medellin[.]gov[.]co

February 6, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Read More

LockBit 3.0 Ransomware Victim: jams[.]edu[.]jo

February 6, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Read More

LockBit 3.0 Ransomware Victim: teleapps[.]com

February 6, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Read More

Royal Ransomware Victim: INNOVATION COLLABORATION SYNERGY

February 6, 2023

RoyalRansomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the...

Read More

abstract-malware-990x400-1

Malware Analysis – ransomware – 4617b9d634b7a6d6c05837e50f1f9398

February 6, 2023

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 4617b9d634b7a6d6c05837e50f1f9398SHA1: 0f3a3af4b8dc4b332b0b1988077c52b4e56e1a24ANALYSIS DATE: 2023-02-06T14:58:36ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Read More

abstract-malware-990x400-1

Malware Analysis – discovery – 441ecc410cb1753b655789df2c7f8deb

February 6, 2023

Score: 10 MALWARE FAMILY: discoveryTAGS:discovery, ransomwareMD5: 441ecc410cb1753b655789df2c7f8debSHA1: 549a397dcdd0ee2e3ff04785a087bc2c6578d5c9ANALYSIS DATE: 2023-02-06T15:26:22ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Read More

abstract-malware-990x400-1

Malware Analysis – djvu – b4de7c46f93b8198888e22674898132f

February 6, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: b4de7c46f93b8198888e22674898132fSHA1: f0c9452685aa4c88cbfa23d719ad4421ef0edd8cANALYSIS DATE: 2023-02-06T16:19:26ZTTPS: T1012, T1082, T1005, T1081,...

Read More

abstract-malware-990x400-1

Malware Analysis – amadey – 13ce4036db9399a130f4bcb4933de99a

February 6, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:laplas, family:smokeloader, family:vidar, botnet:19, backdoor, clipper, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: 13ce4036db9399a130f4bcb4933de99aSHA1:...

Read More

abstract-malware-990x400-1

Malware Analysis – azov – ef2cacf47d7cde4871c1f1d00cb8d3e6

February 6, 2023

Score: 10 MALWARE FAMILY: azovTAGS:family:azov, persistence, ransomware, spyware, stealer, wiperMD5: ef2cacf47d7cde4871c1f1d00cb8d3e6SHA1: 05550cc73c3507a39ab9ae94a08134af2dbd11e7ANALYSIS DATE: 2023-02-06T15:30:17ZTTPS: T1012, T1120, T1082, T1060, T1112, T1005,...

Read More

CISA_Logo

CISA: ASD’s ACSC, CISA, and US and International Partners Release Guidance on Choosing Secure and Verifiable Technologies

January 10, 2025

CISA_Logo

CISA: CISA Releases New Public Version of CDM Data Model Document

January 10, 2025

CISA_Logo

CISA: Cisco Releases Security Updates for NX-OS Software

January 10, 2025

CISA_Logo

CISA: Microsoft Releases December 2024 Security Updates

January 10, 2025

CISA_Logo

CISA: CISA Releases Two Industrial Control Systems Advisories

January 10, 2025