RapLu$ @StackGh0st
Joined March 2022-
Tweets9
-
Followers6
-
Following1
-
Likes8
@G60930953 @malwrhunterteam Nice findings! Thanks :) Possibly related... 🤔 en.fofa.info/result?qbase64… xiomiho[.]com 153[.]75[.]247[.]93
@smica83 @abuse_ch Looks like ->#EternidadeStealer Same campaign from Nov25. Ref: levelblue.com/blogs/spiderla…
@smica83 @abuse_ch Looks like an #OperationFrostBeacon activity. High-confidence match. Ref: seqrite.com/blog/operation…
@smica83 @abuse_ch Looks like #Medved (aKa #ClubfootWolf) @skocherhan @smica83 @malwrhunterteam Same Infra: _> shorturl.at/gqfV3 (-FOFA-) Ref:_> bi-zone.medium.com/clubfoot-wolf-… (July26) --- l1nq.com/kcoozws (Another ref of cluster from Oct25) --
@DarkWebInformer Nice! thanks for this:) <__September_Infra __> en.fofa.info/result?qbase64… #TA #ShinyHunters
@Malwarehunterr Thanks!:) Looks like TAG-144 Activity (aKa #BlindEagle) Ref:-> recordedfuture.com/research/tag-1… Infra:-> en.fofa.info/result?qbase64… Syntax:-> (country="CO" && port="443" && asn="3816" && server="Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30") && icon_hash="" && title=="Index of /"
@Malwarehunterr @malwrhunterteam @500mk500 @skocherhan @JAMESWT_WT @OpcodeIntel @James_inthe_box Nice finding! thanks for sharing:) This appears to be an ongoing campaign leveraging the same infrastructure. You can use the following hunting query to track this activity. en.fofa.info/result?qbase64…
zoharbuber @zoharbuber
31 Followers 2K Following
A @shafie0x1
11 Followers 78 Following
Maciej @finger0ut
43 Followers 664 Following Software developer and reverse engineer, cybersecurity researcher | If interested in having software developed or reversed DM me
You might like
