Security

Malware Analysis – amadey – 6f067e24ed07adc6b424ac9a0e7f5a61

April 24, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:raccoon, family:rhadamanthys, family:smokeloader, family:vidar, botnet:5c24dc0e9726fcc756a18038ae4e0e67, botnet:5cb879265de0011bfc7588d5d251aee6, botnet:fc8427198f843d72c1aa8a66db1a98f3, botnet:pub1, backdoor, collection, discovery, evasion, persistence, ransomware,...

Malware Analysis – djvu – 413e3d55867e81e00b0fc53b335e0c8a

April 24, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:5cb879265de0011bfc7588d5d251aee6, discovery, persistence, ransomware, stealerMD5: 413e3d55867e81e00b0fc53b335e0c8aSHA1: bef6e9491bd8fc6489808c1eebe11d20c638297bANALYSIS DATE: 2023-04-24T17:27:59ZTTPS: T1222, T1082, T1053, T1130, T1112,...

CISA: CISA Releases Malware Analysis Report on ICONICSTEALER

April 24, 2023

CISA Releases Malware Analysis Report on ICONICSTEALER CISA has released a new Malware Analysis Report (MAR) on an infostealer known...

CISA: CISA to Continue and Enhance U.K.’s Logging Made Easy Tool

April 24, 2023

CISA to Continue and Enhance U.K.’s Logging Made Easy Tool CISA has announced plans to continue and enhance the Logging...

CISA: Oracle Releases Security Updates

April 24, 2023

Oracle Releases Security Updates Oracle has released its Critical Patch Update Advisory, Solaris Third Party Bulletin, and Linux Bulletin for...

CISA: CISA Releases One Industrial Control Systems Advisory

April 24, 2023

CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on April 20, 2023. These...

CISA: CISA and Partners Release Cybersecurity Best Practices for Smart Cities

April 24, 2023

CISA and Partners Release Cybersecurity Best Practices for Smart Cities Today, CISA, NSA, FBI, NCSC-UK(link is external), ACSC(link is external),...

CISA: VMware Releases Security Update for Aria Operations for Logs

April 24, 2023

VMware Releases Security Update for Aria Operations for Logs VMware has released a security update to address multiple vulnerabilities in...

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

April 24, 2023

CISA Adds Three Known Exploited Vulnerabilities to Catalog CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog,...

CISA: Cisco Releases Security Advisories for Multiple Products

April 24, 2023

Cisco Releases Security Advisories for Multiple Products Cisco has released security updates for vulnerabilities affecting Industrial Network Director (IND), Modeling...

CISA: CISA Releases Two SBOM Documents

April 24, 2023

CISA Releases Two SBOM Documents Today, CISA released two community-drafted documents around Software Bill of Materials (SBOM): Types of SBOM...

CISA: Drupal Releases Security Advisory to Address Vulnerability in Drupal Core

April 24, 2023

Drupal Releases Security Advisory to Address Vulnerability in Drupal Core Drupal has released a security advisory to address an access...

Malware Analysis – ransomware – e0c0eb3003d60d0f9b138b99386f3ac5

April 23, 2023

Score: 6 MALWARE FAMILY: ransomwareTAGS:ransomwareMD5: e0c0eb3003d60d0f9b138b99386f3ac5SHA1: 490055d08a5e685a9273ccdc21562d6e61f085ceANALYSIS DATE: 2023-04-23T15:53:28ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...

Malware Analysis – djvu – d40e6770732b567015fd74c4ad7ab22b

April 23, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:bf58e1879f88b222ba2391682babf9d8, discovery, persistence, ransomware, spyware, stealerMD5: d40e6770732b567015fd74c4ad7ab22bSHA1: 112d0a3a264ccb52d809cb8c3359733221fc1d1bANALYSIS DATE: 2023-04-23T16:11:01ZTTPS: T1005, T1081, T1060, T1112,...

Malware Analysis – djvu – a138167f24490e16fc61019313b21fe9

April 23, 2023

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:bf58e1879f88b222ba2391682babf9d8, discovery, persistence, ransomware, spyware, stealerMD5: a138167f24490e16fc61019313b21fe9SHA1: 09083bb5f45cc3e4109d48980b01eb8ce97aad85ANALYSIS DATE: 2023-04-23T16:50:27ZTTPS: T1222, T1012, T1082, T1053,...

Malware Analysis – amadey – 385f0863a2078a48cc981c21ca894af4

April 23, 2023

Score: 10 MALWARE FAMILY: amadeyTAGS:family:amadey, family:djvu, family:smokeloader, botnet:pub1, backdoor, discovery, ransomware, trojanMD5: 385f0863a2078a48cc981c21ca894af4SHA1: 1efec0751c7e72261acd3885bb1909ea1bfbf790ANALYSIS DATE: 2023-04-23T16:33:20ZTTPS: T1082, T1222, T1012, T1120,...

Malware Analysis – infinitylock – b805db8f6a84475ef76b795b0d1ed6ae

April 23, 2023

Score: 10 MALWARE FAMILY: infinitylockTAGS:family:infinitylock, ransomwareMD5: b805db8f6a84475ef76b795b0d1ed6aeSHA1: 7711cb4873e58b7adcf2a2b047b090e78d10c75bANALYSIS DATE: 2023-04-23T16:45:30ZTTPS: T1012, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...

Malware Analysis – persistence – c9c341eaf04c89933ed28cbc2739d325

April 23, 2023

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomwareMD5: c9c341eaf04c89933ed28cbc2739d325SHA1: c5b7d47aef3bd33a24293138fcba3a5ff286c2a8ANALYSIS DATE: 2023-04-23T16:55:28ZTTPS: T1107, T1490, T1060, T1112 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...

Security

Malware Analysis – amadey – 6f067e24ed07adc6b424ac9a0e7f5a61

Malware Analysis – djvu – 413e3d55867e81e00b0fc53b335e0c8a

CISA: CISA Releases Malware Analysis Report on ICONICSTEALER

CISA: CISA to Continue and Enhance U.K.’s Logging Made Easy Tool

CISA: Oracle Releases Security Updates

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA and Partners Release Cybersecurity Best Practices for Smart Cities

CISA: VMware Releases Security Update for Aria Operations for Logs

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: Cisco Releases Security Advisories for Multiple Products

CISA: CISA Releases Two SBOM Documents

CISA: Drupal Releases Security Advisory to Address Vulnerability in Drupal Core

Malware Analysis – ransomware – e0c0eb3003d60d0f9b138b99386f3ac5

Malware Analysis – djvu – d40e6770732b567015fd74c4ad7ab22b

Malware Analysis – djvu – a138167f24490e16fc61019313b21fe9

Malware Analysis – amadey – 385f0863a2078a48cc981c21ca894af4

Malware Analysis – infinitylock – b805db8f6a84475ef76b795b0d1ed6ae

Malware Analysis – persistence – c9c341eaf04c89933ed28cbc2739d325

CISA: CISA to Continue and Enhance U.K.’s Logging Made Easy Tool

CISA: CISA Releases One Industrial Control Systems Advisory

CISA: CISA and Partners Release Cybersecurity Best Practices for Smart Cities

CISA: CISA Releases Malware Analysis Report on ICONICSTEALER

CISA: Oracle Releases Security Updates

CISA: Drupal Releases Security Advisory to Address Vulnerability in Drupal Core

[KILLSEC] – Ransomware Victim: BluAgent Technologies, Inc

[KILLSEC] – Ransomware Victim: Shaghalni

[KILLSEC] – Ransomware Victim: Novi Community School District

[KILLSEC] – Ransomware Victim: G&M Direct Hire

CVE Alert: CVE-2025-1509

You may have missed