Month: March 2023

Malware Analysis – quantum – f6ae7a37bae4e80f6514c14695b9cc38

March 1, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: f6ae7a37bae4e80f6514c14695b9cc38SHA1: 42987e66bd73418085e798a60f8ae1e0f1e02119ANALYSIS DATE: 2023-03-01T17:27:28ZTTPS: T1158 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – quantum – 4f497663f23fb2e6b46db9ffa70f6030

March 1, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 4f497663f23fb2e6b46db9ffa70f6030SHA1: 68dfd51dfa1e66ec673f3adda08469f4c88c93a0ANALYSIS DATE: 2023-03-01T17:08:06ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware

March 1, 2023

Six different law firms were targeted in January and February 2023 as part of two disparate threat campaigns distributing GootLoader...

LockBit 3.0 Ransomware Victim: hico-ics[.]com

March 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: hafele[.]com

March 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: laxmi[.]com

March 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: indigo[.]ca

March 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

CISOs Are Stressed Out and It’s Putting Companies at Risk

March 1, 2023

Employee well-being has become a primary focus for many businesses. Even before the pandemic, the C-suite was acutely aware of...

Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy

March 1, 2023

Google has announced the general availability of client-side encryption (CSE) for Gmail and Calendar, months after piloting the feature in...

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

March 1, 2023

A stealthy Unified Extensible Firmware Interface (UEFI) bootkit called BlackLotus has become the first publicly known malware capable of bypassing...

LockBit 3.0 Ransomware Victim: tjel[.]net

March 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Vice Society Ransomware Victim: Vesuvius

March 1, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 195[.]2[.]67[.]185:7443

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]241:443

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]15[.]98:80

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]168[.]20:99

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – d2759f5309e55616b031b25eb74590d6

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: d2759f5309e55616b031b25eb74590d6SHA1: af830fa93d673f977e90eb65cb05103d924d5f93ANALYSIS DATE: 2023-03-01T10:13:59ZTTPS: T1012, T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – b37dbbda5cccadaf790a2f4ba521655c

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b37dbbda5cccadaf790a2f4ba521655cSHA1: ff1b5b752b332e58fa677f94439b6794163845ccANALYSIS DATE: 2023-03-01T09:15:10ZTTPS: T1222, T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 7f65c8c6ccea193f5d9566b41101bcf7

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 7f65c8c6ccea193f5d9566b41101bcf7SHA1: 9d169844ba08a0c8b5a90f45d188a1fc18c45833ANALYSIS DATE: 2023-03-01T09:17:06ZTTPS: T1222, T1053, T1005, T1081, T1012,...

Malware Analysis – djvu – 93c4c47e97687f03ad471d4d0d2f0291

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 93c4c47e97687f03ad471d4d0d2f0291SHA1: ad5800536b4053b7c87a4678900ba37fefe22accANALYSIS DATE: 2023-03-01T10:09:18ZTTPS: T1012, T1082, T1005, T1081, T1222,...

Month: March 2023

Malware Analysis – quantum – f6ae7a37bae4e80f6514c14695b9cc38

Malware Analysis – quantum – 4f497663f23fb2e6b46db9ffa70f6030

Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware

LockBit 3.0 Ransomware Victim: hico-ics[.]com

LockBit 3.0 Ransomware Victim: hafele[.]com

LockBit 3.0 Ransomware Victim: laxmi[.]com

LockBit 3.0 Ransomware Victim: indigo[.]ca

CISOs Are Stressed Out and It’s Putting Companies at Risk

Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

LockBit 3.0 Ransomware Victim: tjel[.]net

Vice Society Ransomware Victim: Vesuvius

Cobalt Stike Beacon Detected – 195[.]2[.]67[.]185:7443

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]241:443

Cobalt Stike Beacon Detected – 43[.]139[.]15[.]98:80

Cobalt Stike Beacon Detected – 43[.]138[.]168[.]20:99

Malware Analysis – djvu – d2759f5309e55616b031b25eb74590d6

Malware Analysis – djvu – b37dbbda5cccadaf790a2f4ba521655c

Malware Analysis – djvu – 7f65c8c6ccea193f5d9566b41101bcf7

Malware Analysis – djvu – 93c4c47e97687f03ad471d4d0d2f0291

Cobalt Stike Beacon Detected – 81[.]70[.]239[.]223:80

Cobalt Stike Beacon Detected – 108[.]165[.]178[.]42:9091

Cobalt Stike Beacon Detected – 47[.]95[.]149[.]125:8443

Cobalt Stike Beacon Detected – 47[.]122[.]22[.]26:80

[HANDALA] – Ransomware Victim: Silicom

[INCRANSOM] – Ransomware Victim: Sa[.]SS Datentechnik

[BLACKSUIT] – Ransomware Victim: co[.]cullman[.]al[.]us

CVE Alert: CVE-2024-9511

CVE Alert: CVE-2024-11446

You may have missed