Month: June 2023

8 Base Ransomware Victim: Neighborhood Progress Fund

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: IMASA

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: Richard W[.] Fuller CPA

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: La Canastería

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: MRO SUPPORT, INC

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: Immobilienmakler in Oldenburg

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: Veal and Prasad

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: SITARA

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: Thayer Academy

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: Midway Ford

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: HELPHONE

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: COMPAGNIE REGIONALE D’ALIMENTS (COREAL)

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: CONTASS

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: M Metzler & Associates

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: Ellard-Willson Engineering Ltd

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: Zenex

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: General de Alimentos Nisa C[.]A[.] (GENICA)

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

8 Base Ransomware Victim: Lake Cable

June 22, 2023

NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content of the files...

EndExt – Go Tool For Extracting All The Possible Endpoints From The JS Files

June 22, 2023

EndExt is a .go tool for extracting all the possible endpoints from the JS files Idea When you crawll all...

Daily Threat Intelligence – June 22 – 2023

June 22, 2023

Apple on Wednesday resolved three zero-day vulnerabilities that were being actively exploited in attacks aimed at installing the TriangleDB spyware...

Malware Analysis – amadey – feb6ecd04a1ad4ea6336f1c5e0f7c07c

June 22, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:fabookie, family:smokeloader, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, botnet:pub1, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: feb6ecd04a1ad4ea6336f1c5e0f7c07cSHA1: 2b3e00704e2780d33f0ce72bbd8f61115f8c55dcANALYSIS...

Malware Analysis – djvu – 9a978ce2ff697915c879d31785b37e16

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: 9a978ce2ff697915c879d31785b37e16SHA1: bc58374ccf7bff13fb0bf0dfe17fb32c979979f4ANALYSIS DATE: 2023-06-22T15:58:08ZTTPS: T1060, T1112, T1222, T1082,...

Malware Analysis – persistence – 52105eaff1b7b02bf950b80771e9bda9

June 22, 2023

Score: 10 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 52105eaff1b7b02bf950b80771e9bda9SHA1: e16ecdfebf018faa7d4cf92ea03de06e5aa3e861ANALYSIS DATE: 2023-06-22T17:04:09ZTTPS: T1107, T1490, T1112, T1057, T1060, T1082, T1012, T1120,...

Malware Analysis – djvu – 0fa8f9afbe4ca05578fbc00fe8fd1e45

June 22, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:153ce668f1e21829c936c2b11fa4d869, discovery, persistence, ransomware, spyware, stealerMD5: 0fa8f9afbe4ca05578fbc00fe8fd1e45SHA1: b41ce3a558f981cbcc4819654564c8c497607611ANALYSIS DATE: 2023-06-22T16:15:27ZTTPS: T1005, T1081, T1060, T1112,...

Month: June 2023

8 Base Ransomware Victim: Neighborhood Progress Fund

8 Base Ransomware Victim: IMASA

8 Base Ransomware Victim: Richard W[.] Fuller CPA

8 Base Ransomware Victim: La Canastería

8 Base Ransomware Victim: MRO SUPPORT, INC

8 Base Ransomware Victim: Immobilienmakler in Oldenburg

8 Base Ransomware Victim: Veal and Prasad

8 Base Ransomware Victim: SITARA

8 Base Ransomware Victim: Thayer Academy

8 Base Ransomware Victim: Midway Ford

8 Base Ransomware Victim: HELPHONE

8 Base Ransomware Victim: COMPAGNIE REGIONALE D’ALIMENTS (COREAL)

8 Base Ransomware Victim: CONTASS

8 Base Ransomware Victim: M Metzler & Associates

8 Base Ransomware Victim: Ellard-Willson Engineering Ltd

8 Base Ransomware Victim: Zenex

8 Base Ransomware Victim: General de Alimentos Nisa C[.]A[.] (GENICA)

8 Base Ransomware Victim: Lake Cable

EndExt – Go Tool For Extracting All The Possible Endpoints From The JS Files

Daily Threat Intelligence – June 22 – 2023

Malware Analysis – amadey – feb6ecd04a1ad4ea6336f1c5e0f7c07c

Malware Analysis – djvu – 9a978ce2ff697915c879d31785b37e16

Malware Analysis – persistence – 52105eaff1b7b02bf950b80771e9bda9

Malware Analysis – djvu – 0fa8f9afbe4ca05578fbc00fe8fd1e45

[SARCOMA] – Ransomware Victim: Sheyenne Tooling & Manufacturing

[AKIRA] – Ransomware Victim: Peikko

CVE Alert: CVE-2025-22808

CVE Alert: CVE-2025-22806

CVE Alert: CVE-2025-22818

You may have missed