Year: 2023

Malware Analysis – djvu – 45b0220aa7be949fcf01f1c68daedbb6

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:19, discovery, persistence, ransomware, spyware, stealerMD5: 45b0220aa7be949fcf01f1c68daedbb6SHA1: e743588797a064205c212beef52235d4224231e2ANALYSIS DATE: 2023-01-14T05:07:02ZTTPS: T1012, T1082, T1060, T1112,...

Malware Analysis – njrat – 596e8b4c50fa6579495c12756c3b5f14

January 14, 2023

Score: 10 MALWARE FAMILY: njratTAGS:family:njrat, botnet:hacked, discovery, evasion, persistence, ransomware, trojanMD5: 596e8b4c50fa6579495c12756c3b5f14SHA1: de331021e0b2f8fcb792db5cef59472c1964b3bfANALYSIS DATE: 2023-01-14T04:54:53ZTTPS: T1112, T1042, T1060, T1012, T1031,...

Malware Analysis – djvu – dd389d4033a9f3b4b038bb25d124cb46

January 14, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:rhadamanthys, family:smokeloader, family:vidar, botnet:19, backdoor, discovery, persistence, ransomware, spyware, stealer, trojanMD5: dd389d4033a9f3b4b038bb25d124cb46SHA1: 7ed92f2d935aaf50af22423d774ebe0b8613c8f2ANALYSIS DATE: 2023-01-14T05:03:02ZTTPS:...

Malware Analysis – revengerat – 19c677bb8cda5703f42c143bb4251e6a

January 14, 2023

Score: 10 MALWARE FAMILY: revengeratTAGS:family:revengerat, family:xmrig, botnet:guest, discovery, evasion, miner, persistence, ransomware, stealer, trojanMD5: 19c677bb8cda5703f42c143bb4251e6aSHA1: ad85336a7304a4e58b2a4f5c40b02f578aa00923ANALYSIS DATE: 2023-01-14T05:20:28ZTTPS: T1082, T1112,...

Year: 2023

Malware Analysis – djvu – 45b0220aa7be949fcf01f1c68daedbb6

Malware Analysis – njrat – 596e8b4c50fa6579495c12756c3b5f14

Malware Analysis – djvu – dd389d4033a9f3b4b038bb25d124cb46

Malware Analysis – revengerat – 19c677bb8cda5703f42c143bb4251e6a

RAT malware campaign tries to evade detection using polyglot files

MetaMask warns of new ‘Address Poisoning’ cryptocurrency scam

European police takes down call centers behind cryptocurrency scams

Royal Mail halts international services after cyberattack

Vice Society ransomware claims attack on Australian firefighting service

The Week in Ransomware – January 13th 2023 – LockBit in the spotlight

Microsoft: Exchange Server 2013 reaches end of support in 90 days

Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flaw

Fortinet: Govt networks targeted with now-patched SSL-VPN zero-day

NortonLifeLock warns that hackers breached Password Manager accounts

New Dark Pink APT group targets govt and military with custom malware

PoC exploits released for critical bugs in popular WordPress plugins

Royal Mail cyberattack linked to LockBit ransomware operation

Cisco warns of auth bypass bug with public exploit in EoL routers

Scattered Spider hackers use old Intel driver to bypass security

Hackers exploit Control Web Panel flaw to open reverse shells

Gootkit malware abuses VLC to infect healthcare orgs with Cobalt Strike

Android TV box on Amazon came pre-installed with malware

Twitter claims leaked data of 200M users not stolen from its systems

Threema claims encryption flaws never had a real-world impact

Fake PoC Exploit: A New Threat for Security Researchers from Infostealer

Historic Cyber-Attack on Slovakia’s Land Registry Causes Major Disruption

Medusind Data Breach Exposes Sensitive Patient Information to Cybercriminals

Fake CrowdStrike Job Offers: A New Tactic for Distributing Cryptominers

[EVEREST] – Ransomware Victim: Protected: Title Hidden

You may have missed