threatintel

Flare-Qdb – Command-line And Python Debugger For Instrumenting And Modifying Native Software Behavior On Windows And Linux

February 15, 2022

flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set...

Cobalt Stike Beacon Detected – 3[.]109[.]47[.]180:8888

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 96[.]126[.]114[.]193:80

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]98[.]242[.]152:80

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 167[.]172[.]247[.]211:443

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 23[.]183[.]81[.]248:443

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 101[.]35[.]198[.]64:80

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 116[.]62[.]144[.]162:80

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 159[.]223[.]176[.]199:443

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 82[.]156[.]188[.]211:6666

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 120[.]79[.]99[.]82:443

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Conti Ransomware Victim: https-www-geegroup-co

February 15, 2022

continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...

Cobalt Stike Beacon Detected – 34[.]202[.]249[.]196:443

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 110[.]42[.]210[.]57:2222

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 111[.]230[.]67[.]161:10001

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 124[.]223[.]17[.]79:443

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 1[.]12[.]218[.]59:111

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]113[.]192[.]46:443

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 119[.]91[.]120[.]76:8080

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Cobalt Stike Beacon Detected – 47[.]97[.]38[.]151:81

February 15, 2022

The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...

Google fixes a Chrome zero-day flaw actively exploited in attacks

February 15, 2022

Google fixed a high-severity zero-day flaw actively exploited with the release of Chrome emergency update for Windows, Mac, and Linux....

LockBit 2.0 Ransomware Victim: zhulian[.]co[.]th

February 15, 2022

LockBit 2.0 Ransomware NOTE: The information on this page is automated and scraped directly from the LockBit 2.0 Onion Dark...

LockBit 2.0 Ransomware Victim: cclint[.]com

February 15, 2022

LockBit 2.0 Ransomware NOTE: The information on this page is automated and scraped directly from the LockBit 2.0 Onion Dark...

LockBit 2.0 Ransomware Victim: wingsoft[.]it

February 15, 2022

LockBit 2.0 Ransomware NOTE: The information on this page is automated and scraped directly from the LockBit 2.0 Onion Dark...

threatintel

Flare-Qdb – Command-line And Python Debugger For Instrumenting And Modifying Native Software Behavior On Windows And Linux

Cobalt Stike Beacon Detected – 3[.]109[.]47[.]180:8888

Cobalt Stike Beacon Detected – 96[.]126[.]114[.]193:80

Cobalt Stike Beacon Detected – 47[.]98[.]242[.]152:80

Cobalt Stike Beacon Detected – 167[.]172[.]247[.]211:443

Cobalt Stike Beacon Detected – 23[.]183[.]81[.]248:443

Cobalt Stike Beacon Detected – 101[.]35[.]198[.]64:80

Cobalt Stike Beacon Detected – 116[.]62[.]144[.]162:80

Cobalt Stike Beacon Detected – 159[.]223[.]176[.]199:443

Cobalt Stike Beacon Detected – 82[.]156[.]188[.]211:6666

Cobalt Stike Beacon Detected – 120[.]79[.]99[.]82:443

Conti Ransomware Victim: https-www-geegroup-co

Cobalt Stike Beacon Detected – 34[.]202[.]249[.]196:443

Cobalt Stike Beacon Detected – 110[.]42[.]210[.]57:2222

Cobalt Stike Beacon Detected – 111[.]230[.]67[.]161:10001

Cobalt Stike Beacon Detected – 124[.]223[.]17[.]79:443

Cobalt Stike Beacon Detected – 1[.]12[.]218[.]59:111

Cobalt Stike Beacon Detected – 47[.]113[.]192[.]46:443

Cobalt Stike Beacon Detected – 119[.]91[.]120[.]76:8080

Cobalt Stike Beacon Detected – 47[.]97[.]38[.]151:81

Google fixes a Chrome zero-day flaw actively exploited in attacks

LockBit 2.0 Ransomware Victim: zhulian[.]co[.]th

LockBit 2.0 Ransomware Victim: cclint[.]com

LockBit 2.0 Ransomware Victim: wingsoft[.]it

HackerOne Bug Bounty Disclosure: path-traversal-by-drive-name-in-windows-environment-taise

[METAENCRYPTOR] – Ransomware Victim: Lee Hartman & Sons

[DRAGONFORCE] – Ransomware Victim: Mapping Solutions

[DRAGONFORCE] – Ransomware Victim: Aquasys

[AKIRA] – Ransomware Victim: Grand Fire Protection

You may have missed