Picture

RedDrip Team @RedDrip7

Technical Twitter of QiAnXin Technology, leading Chinese security vendor. It is operated by RedDrip Team which focuses on malware, APT and threat intelligence. ti.qianxin.com Joined April 2018
  • Tweets
    416
  • Followers
    16K
  • Following
    29
  • Likes
    6
RedDrip7 Profile Picture

RedDrip Team @RedDrip7

5 days ago

Probably related to #APT #Kimsuky ISO -> LNK -> VBS -> DLL 71fde58b35319ef2bc8268e47eac8b9c 103d584dcb8338a07ab78b90429fd7c0 98d597a4568fc00f8517420d5e3e5f1b 74bed90b2e02c05e332d71e0e7510528

RedDrip7 Profile Picture

RedDrip Team @RedDrip7

5 days ago

#Malware #IoC chromegg[.]com (phishing site) hxxp://qaqchawu.com:8080

RedDrip7 Profile Picture

RedDrip Team @RedDrip7

7 days ago

#APT #APT36 #TransparentTribe Samples seem to be used in last year but uploaded to VT recently 639e383d35a9787d8407806eea80c016 c57a408072035185687e8fee4d4f38bd ab5a3b1c26a82f7e6f35e31d2abe5c9d d6c92cbece01228c5a0b9781bf40c445 77.93.155.106:{5698,8989,15168,18689,26568}

RedDrip7 Profile Picture

RedDrip Team @RedDrip7

2 weeks ago

#Botnet #IoC 45.144.174.157:38975 103.175.16.200:38975 212.192.6.24:56124 103.136.150.142:56124

RedDrip7 Profile Picture

RedDrip Team @RedDrip7

2 weeks ago

#APT #Lazarus #IoC 6559d05cfcf294ef325a3eb772c3d3ba (update92w\.zip) fcc0114e34b352d9d3312118c6fd9341 (main.js) ef7b96bffe252ede8259fea30fc3a9a3 (main.js) hxxp://69.10.53.86 hxxp://141.98.168.79

RedDrip7 Profile Picture

RedDrip Team @RedDrip7

3 weeks ago

#APT #Patchwork Lnk -> DLL -> C# Trojan loaded in memory 8c342a5519400df4044e2ed75ea5a936 (lnk) dfbdd34e0e463bb2266cab599396aa02 (dll) 92c13c07a4459bc5bae59bdea17284de (trojan) hxxps://nr3cgovpk.org/ hxxps://driftlance.org/bIHTfcVHegEoMrv/WCcod7JY3zwUpDH.php

RedDrip7 Profile Picture

RedDrip Team @RedDrip7

3 weeks ago

Analysis of Windows CLFS #EoP vuln (#CVE-2025-29824) in-the-wild exploitation sample and root cause Report: ti.qianxin.com/blog/articles/… ITW sample: virustotal.com/gui/file/808cb…

RedDrip7 Profile Picture

RedDrip Team @RedDrip7

4 weeks ago

#APT Under the circumstances of soaring gold prices, the APT group #UTG-Q-010 infiltrated two gold traders in Hong Kong and replaced their official trading software to carry out a supply chain attack. Report: ti.qianxin.com/blog/articles/…

RedDrip7 Profile Picture

RedDrip Team @RedDrip7

4 weeks ago

#APT #Confucius #IoC eb4905f8e596c5771dc84c722c4071f8 sinopakgateway[.info baidunetdisk[.info hxxps://sinopakgateway.info/MRTP28ZW7DH.tut hxxps://baidunetdisk.info/NR44PZXRWND8A.tut

RedDrip7 Profile Picture

RedDrip Team @RedDrip7

2 months ago

#APT #Bitter targets Iraqi-Sri Lanka Committee docx --> dotm --> VBA 4e87283dcc6b2e22edba7bc8aab290cf ("Meetings of the nineteenth session of the Iraqi-Sri Lanka Committee.docx") f0246943f8fd24a7e5df9aa1776849d0 ("DesignTemplate.dotm") hxxps://glamormusicwave.com

RedDrip7 Profile Picture

RedDrip Team @RedDrip7

2 months ago

"Mimo" Gang used #Sharepoint #ToolShell to deliver "4l4md4r" #ransomware, which is written in Go language and contains religious-style function names. Report: mp.weixin.qq.com/s/h6_ijQAHhq4t…

RedDrip7 Profile Picture

RedDrip Team @RedDrip7

2 months ago

Brief analysis of Chrome vuln #CVE-2025-6554, which was exploited in the wild. ti.qianxin.com/blog/articles/…

Trends for United States

#DWTS
32,4 B posts
Boone
25,4 B posts
Kelsey Mitchell
3.299 posts
Dodgers
69,9 B posts
Yankees
96,8 B posts
Chapman
16,9 B posts
Lauren
52,7 B posts
Nicki
458 B posts
Fried
38,1 B posts
Snell
7.355 posts
Hunter Greene
4.872 posts
Ohtani
26,7 B posts
Teoscar
7.130 posts
#WWENXT
18,3 B posts
Hilaria
3.022 posts
Weaver
12,4 B posts
Crochet
31,4 B posts
#DirtyWater
5.525 posts
Cora
10,7 B posts
Jackie Young

You might like

Peace and Love. Just Analysis/Hunter. #APT #threatIntelligence #Exploit #CTI Need Job
blackorbird
@blackorbird
36K Followers
Shadow Chaser Group is a sub-group of the GcowSec team which consists of college students who love it.Shadow Chaser Group focused on APT hunt and analysis
Shadow Chaser Group
@ShadowChasing1
11K Followers
Malware slayer Member of @CuratedIntel
Arkbird
@Arkbird_SOLG
16K Followers
Fighting cyber threats one research at a time. News from Check Point’s (@checkpointSW) Research team.
Check Point Research
@_CPResearch_
24K Followers
threat intelligence @google writing & sharing on adversary tradecraft, malware, threat detection, AI-nexus intel and all things #yara
Steve YARA Synapse Mi...
@stvemillertime
17K Followers
Real Intrusions by Real Attackers, the Truth Behind the Intrusion. Services: https://t.co/XW613EKt2w
The DFIR Report
@TheDFIRReport
62K Followers
Managed Compromise Assessments #YARA #IOCs #DFIR #APT #Sigma - the home of @thor_scanner, ASGARD and the Aurora Agent
Nextron Systems
@nextronsystems
9K Followers
The latest research and news from Unit 42, the Palo Alto Networks (@paloaltontwks) Threat Intelligence and Security Consulting Team covering incident response.
Unit 42
@Unit42_Intel
64K Followers
#OSINT treasure hunter, investigator, #CyberThreatIntel analyst. Opinions are my own. Follow me on Telegram https://t.co/i6VBbeUXgd for cyber news.
Cyber_OSINT
@Cyber_O51NT
19K Followers
Empowering businesses with proactive security solutions: Interactive Sandbox, TI Lookup and Feeds. Sign up: https://t.co/8hIX0Qh5ME
ANY.RUN
@anyrun_app
30K Followers
Threat Researcher @proofpoint | @Cryptolaemus1
Tommy M (TheAnalyst)
@ffforward
14K Followers
James
@James_inthe_box
22K Followers
#Malware C2 hunter #infosec passionate. Tweets are my own.
Dee
@ViriBack
10K Followers
Founder Dark Vortex/Brute Ratel | Former RedTeam @CrowdStrike @Mandiant @niiconsulting
Chetan Nayak (Brute R...
@NinjaParanoid
31K Followers
malware analyst, reverse engineer.
reecDeep
@reecdeep
11K Followers