Year: 2023

Malware Analysis – djvu – 388c64fa17cc45c603347a1827c6654a

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: 388c64fa17cc45c603347a1827c6654aSHA1: 3d52688c241646bfe0b3a609b5aafe4ef813b9c5ANALYSIS DATE: 2023-03-01T16:36:22ZTTPS: T1060, T1112, T1082,...

Malware Analysis – djvu – acb8cb132854ba3073261dcde6c6a4b6

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: acb8cb132854ba3073261dcde6c6a4b6SHA1: a93692c65ba4a227cdd61d76859d00324634a6ffANALYSIS DATE: 2023-03-01T16:36:52ZTTPS: T1060, T1112, T1005, T1081, T1012,...

Malware Analysis – djvu – 6de183ada65327369b9de957245b3b8e

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 6de183ada65327369b9de957245b3b8eSHA1: e011e1cceed94d1a59d584126495dfc86cd39dedANALYSIS DATE: 2023-03-01T16:31:03ZTTPS: T1222, T1005, T1081, T1130, T1112,...

Malware Analysis – quantum – 6ca72f4a8882bf012916dee92b634e6b

March 1, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 6ca72f4a8882bf012916dee92b634e6bSHA1: b57cd4e9e641640b84fbeec42f8272b09b46b834ANALYSIS DATE: 2023-03-01T17:05:17ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – quantum – 14803cb39cd81efd2a40a38a58dcba70

March 1, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 14803cb39cd81efd2a40a38a58dcba70SHA1: fe328839ea5f9a472ee47b68ca92c0d7eac2a47cANALYSIS DATE: 2023-03-01T17:12:24ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – quantum – f6ae7a37bae4e80f6514c14695b9cc38

March 1, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: f6ae7a37bae4e80f6514c14695b9cc38SHA1: 42987e66bd73418085e798a60f8ae1e0f1e02119ANALYSIS DATE: 2023-03-01T17:27:28ZTTPS: T1158 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more...

Malware Analysis – quantum – 4f497663f23fb2e6b46db9ffa70f6030

March 1, 2023

Score: 10 MALWARE FAMILY: quantumTAGS:family:quantum, ransomwareMD5: 4f497663f23fb2e6b46db9ffa70f6030SHA1: 68dfd51dfa1e66ec673f3adda08469f4c88c93a0ANALYSIS DATE: 2023-03-01T17:08:06ZTTPS: T1158, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware

March 1, 2023

Six different law firms were targeted in January and February 2023 as part of two disparate threat campaigns distributing GootLoader...

LockBit 3.0 Ransomware Victim: hico-ics[.]com

March 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: hafele[.]com

March 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: laxmi[.]com

March 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

LockBit 3.0 Ransomware Victim: indigo[.]ca

March 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

CISOs Are Stressed Out and It’s Putting Companies at Risk

March 1, 2023

Employee well-being has become a primary focus for many businesses. Even before the pandemic, the C-suite was acutely aware of...

Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy

March 1, 2023

Google has announced the general availability of client-side encryption (CSE) for Gmail and Calendar, months after piloting the feature in...

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

March 1, 2023

A stealthy Unified Extensible Firmware Interface (UEFI) bootkit called BlackLotus has become the first publicly known malware capable of bypassing...

LockBit 3.0 Ransomware Victim: tjel[.]net

March 1, 2023

LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the...

Vice Society Ransomware Victim: Vesuvius

March 1, 2023

Vice Society Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...

Cobalt Stike Beacon Detected – 195[.]2[.]67[.]185:7443

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]241:443

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]139[.]15[.]98:80

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 43[.]138[.]168[.]20:99

March 1, 2023

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Malware Analysis – djvu – d2759f5309e55616b031b25eb74590d6

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: d2759f5309e55616b031b25eb74590d6SHA1: af830fa93d673f977e90eb65cb05103d924d5f93ANALYSIS DATE: 2023-03-01T10:13:59ZTTPS: T1012, T1060, T1112, T1222, T1005,...

Malware Analysis – djvu – b37dbbda5cccadaf790a2f4ba521655c

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: b37dbbda5cccadaf790a2f4ba521655cSHA1: ff1b5b752b332e58fa677f94439b6794163845ccANALYSIS DATE: 2023-03-01T09:15:10ZTTPS: T1222, T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – 7f65c8c6ccea193f5d9566b41101bcf7

March 1, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, discovery, persistence, ransomware, spyware, stealerMD5: 7f65c8c6ccea193f5d9566b41101bcf7SHA1: 9d169844ba08a0c8b5a90f45d188a1fc18c45833ANALYSIS DATE: 2023-03-01T09:17:06ZTTPS: T1222, T1053, T1005, T1081, T1012,...

Year: 2023

Malware Analysis – djvu – 388c64fa17cc45c603347a1827c6654a

Malware Analysis – djvu – acb8cb132854ba3073261dcde6c6a4b6

Malware Analysis – djvu – 6de183ada65327369b9de957245b3b8e

Malware Analysis – quantum – 6ca72f4a8882bf012916dee92b634e6b

Malware Analysis – quantum – 14803cb39cd81efd2a40a38a58dcba70

Malware Analysis – quantum – f6ae7a37bae4e80f6514c14695b9cc38

Malware Analysis – quantum – 4f497663f23fb2e6b46db9ffa70f6030

Cybercriminals Targeting Law Firms with GootLoader and FakeUpdates Malware

LockBit 3.0 Ransomware Victim: hico-ics[.]com

LockBit 3.0 Ransomware Victim: hafele[.]com

LockBit 3.0 Ransomware Victim: laxmi[.]com

LockBit 3.0 Ransomware Victim: indigo[.]ca

CISOs Are Stressed Out and It’s Putting Companies at Risk

Gmail and Google Calendar Now Support Client-Side Encryption (CSE) to Boost Data Privacy

BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11

LockBit 3.0 Ransomware Victim: tjel[.]net

Vice Society Ransomware Victim: Vesuvius

Cobalt Stike Beacon Detected – 195[.]2[.]67[.]185:7443

Cobalt Stike Beacon Detected – 45[.]227[.]252[.]241:443

Cobalt Stike Beacon Detected – 43[.]139[.]15[.]98:80

Cobalt Stike Beacon Detected – 43[.]138[.]168[.]20:99

Malware Analysis – djvu – d2759f5309e55616b031b25eb74590d6

Malware Analysis – djvu – b37dbbda5cccadaf790a2f4ba521655c

Malware Analysis – djvu – 7f65c8c6ccea193f5d9566b41101bcf7

EU Launches Cybersecurity Support Centre by 2026 to Strengthen Healthcare Security

GoDaddy’s Serious Security Failings Exposed by FTC Investigation

Image-Based Malware and GenAI: New Tactics Used by Hackers to Evade Email Security

Fortinet Firewalls Exposed: 15,000 Config Files Leaked by New Hacking Group

Biden Strengthens Cybersecurity Executive Order Before Trump Transition

You may have missed