Picture

Filescan.io @filescan_itsec

https://t.co/7eeFPFSU7m is a next-gen sandbox and malware analysis service. Operating at 10x speed vs traditional, it is the best choice for in-depth malware assessment filescan.io Germany Joined October 2020
  • Tweets
    252
  • Followers
    2K
  • Following
    34
  • Likes
    75
filescan_itsec Profile Picture

Filescan.io @filescan_itsec

7 days ago

🚀 Malicious #AI models aren’t theory—they’re a real supply-chain threat. Attackers use new evasion tricks to slip past scanners. See how filescan.io detects poisoned models before they reach production: opsw.at/cDGW3Zh #AI #SecOps #Infosec #Sandbox

filescan_itsec Profile Picture

Filescan.io @filescan_itsec

3 weeks ago

Attackers abused Alibaba #AI brand to push fake #PyPI packages with malicious #Pickle stealer 😈🥒. Though online less than 24 hours, they were downloaded ~1,600 times. This shows how fast supply chain attacks can spread Check out sandbox's Pickle scan: filescan.io/uploads/68bf95…

filescan_itsec Profile Picture

Filescan.io @filescan_itsec

4 weeks ago

How cool is it when AI flags a malicious email at entry, and sandbox emulates the infection chain in seconds? email > doc > shellcode > vbs > ps > payload Check out a #phishing email we received last week in our community instance: filescan.io/uploads/68b8b0… #aidetect #sandbox

filescan_itsec Profile Picture

Filescan.io @filescan_itsec

2 months ago

Nothing beats a .NET holiday! 🎶 Wait... 🦸 Our #sandbox does! The sample hides malicious DLLs in image resources using #steganography 🖼️🐀 which will then perform the decrypting and loading of the final #stealer payload ⚙️ Our detection: filescan.io/uploads/689ca1… #malware

filescan_itsec Profile Picture

Filescan.io @filescan_itsec

3 months ago

Opendir on compromised website #Remcos hides in plain sight on a compromised website. Sandboxing helps cut noise on #opendir discovery & extract C2s fast. Go hunt on filescan.io! Curious? Check it out: filescan.io/uploads/6852d3… #ThreatIntel

filescan_itsec Profile Picture

Filescan.io @filescan_itsec

4 months ago

#KatzStealer was recently spotted for sale in underground forums. Now flooding the wild via classic chain: gzip > JS > PowerShell > image w/ hidden .NET loader. Unmask the obfuscated chain and reach the payload in secs, check its trace! filescan.io/uploads/680f74… #stealer #sandbox

filescan_itsec Profile Picture

Filescan.io @filescan_itsec

5 months ago

🚨 Stealthy PowerShell dropper evades delivers XWorm! Stealthy PowerShell dropper evades AVs! Adds Defender exclusions & drops multiple malicious EXEs. Uses irm | iex for remote execution, delivering #XWorm. Check out the report: filescan.io/uploads/680999…

filescan_itsec Profile Picture

Filescan.io @filescan_itsec

6 months ago

WSF challenges traditional sandboxes & AVs! This one evades detection but unravels fast with emulation, exposing modus operandi & infrastructure in seconds: WSF > Base64+XOR > Remote BAT > Persistence & Payload Fetch > PyArmor Scripts filescan.io/uploads/67ed06… #adaptive #sandbox

filescan_itsec Profile Picture

Filescan.io @filescan_itsec

7 months ago

🚨⚠️Some attackers discovered that cropping the bottom pixels of a QRcode would get many automatic scanners to miss the actual QR💀 Guess what... we discovered it too!🦉MONTHS AGO!😎 Though we realized that many vendors are still missing this. Our report: filescan.io/uploads/67c84d…

filescan_itsec Profile Picture

Filescan.io @filescan_itsec

8 months ago

A 6-month-old .NET PE injector remains undetected on archive.org! This file was flagged as clean... and still available for its usage 🚨 VBScript → PowerShell → base64 .PE + reflective loading → .NET PE injector → #PureLogs Stealer filescan.io/uploads/678f55…

filescan_itsec Profile Picture

Filescan.io @filescan_itsec

8 months ago

Stealthy execution via WebDAV is on the rise! 📈 #StrelaStealer used this technique to target Europe: email → obfuscated JS → PowerShell → WebDAV-hosted malware Check out this report: filescan.io/uploads/6793a5… Hunt more samples: filescan.io/search-result?… #sandbox #triage

filescan_itsec Profile Picture

Filescan.io @filescan_itsec

8 months ago

⚠️ OLE objects embedded within RTF files are suspicious. ⚠️ 🤔 🚨 But if the context is an email containing an attached RTF with an OLE object, it may be trying to exploit CVE-2025-21298! 🚨☠️ filescan.io/uploads/679a76… #exploit #RCE #maldoc #CVE

filescan_itsec Profile Picture

Filescan.io @filescan_itsec

10 months ago

Emulation & YARA? 🔥 Perfect duo to identify malware even through thick layers of obfuscation! Email attachment -> obfuscated & multilayer JavaScript -> vjw0rm #phishing #adaptive #sandbox // Check it out: filescan.io/uploads/67575f…

Trends for United States

#DWTS
32 B posts
Boone
25 B posts
Yankees
95,8 B posts
Kelsey Mitchell
2.592 posts
Chapman
16,8 B posts
Dodgers
68 B posts
Lauren
51,8 B posts
Fried
37,8 B posts
Hunter Greene
4.844 posts
Snell
6.964 posts
Ohtani
25,2 B posts
Teoscar
6.909 posts
#WWENXT
18 B posts
Hilaria
2.977 posts
Nicki
453 B posts
Weaver
12,3 B posts
Crochet
31 B posts
#DirtyWater
5.500 posts
Cora
10,7 B posts
Jackie Young

You might like

DFIR | Malware Hunter | @Cryptolaemus1
proxylife
@pr0xylife
20K Followers
Malware and cybercrime | Cyber Threat Intelligence Analyst at @PRODAFT
3xp0rt
@3xp0rtblog
15K Followers
Tweets about security research, incident response, and SecOps automation. We built the Autonomous SOC platform - take a tour: https://t.co/wIvFULuQUA
Intezer
@IntezerLabs
10K Followers
Malware slayer Member of @CuratedIntel
Arkbird
@Arkbird_SOLG
16K Followers
Malware Analysis Creator of Debloat, certReport, and https://t.co/w4rAuuB7O0 Want to chat? Join the Debloat discord: https://t.co/ZcWIqa6ZA9
Squiblydoo
@SquiblydooBlog
4K Followers
Matrix of Command and Control (C2) Frameworks #C2Matrix #RedTeam #BlueTeam #PurpleTeam
C2 Matrix | #C2Matrix
@c2_matrix
6K Followers
Threat Researcher at Check Point @_CPResearch_ #DFIR #Reversing - All opinions expressed here are mine only. https://t.co/iWvwWF1AnN
Jiří Vinopal
@vinopaljiri
10K Followers
Empowering businesses with proactive security solutions: Interactive Sandbox, TI Lookup and Feeds. Sign up: https://t.co/8hIX0Qh5ME
ANY.RUN
@anyrun_app
30K Followers
Payloads or it didn't happen. https://t.co/rAVsWT6dcl
CAPE Sandbox
@CapeSandbox
5K Followers
Follow us for IP address OSINT, threat data aggregation, bulk IP lookups, free API access and more - https://t.co/FdwKUSr0a0
sicehice
@sicehice
2K Followers
Generic Detection Rules for Log Data
sigma
@sigma_hq
5K Followers
@msftsecurity | Chasing bad bois
Ne0ne | Igal
@0xToxin
10K Followers
Threat Researcher, Blue Team, DFIR, Malware Analysis, and Reverse Engineering. “⚔️What do we say to God of malware, Not today⚔️”
Max_Malyutin
@Max_Mal_
13K Followers
Reverse engineer at FLARE/@Google | @pluralsight author | 😱 1M+ views on YT | 🎙️ Host of Behind the Binary podcast 👇
Josh Stroschein | The...
@jstrosch
12K Followers
No complexity, just security. We overpower threats and empower IT to cover every stage of an attack, and every size of business.
ThreatDown
@Threat_Down
18K Followers