home.social

#bazarloader — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #bazarloader, aggregated by home.social.

fetched live
  1. Just Another Blue Teamer @[email protected] ·

    Happy Sunday!

    The Intel 471 team provides their findings of the #BumbleBee loader as it makes its comeback after a two month break. Taking the place of the #BazarLoader (the source code was leaked when the #Conti leak occurred). The BumbleBee loader has been associated with distributing ransomware and is currently being used by multiple threat actors. My favorite part of this article though (and not surprising) is all the MITRE ATT&CK mappings that provide all the #ThreatHunters a place to start looking, so thank you for that team! I hope you all enjoy and Happy Hunting!

    Bumblebee Loader Resurfaces in New Campaign
    intel471.com/blog/bumblebee-lo

    #CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting #readoftheday

    #bumblebee #bazarloader #conti #threathunters #cybersecurity #itsecurity
  2. 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @[email protected] ·

    #BazarLoader / #BazarBackdoor also uses the BackConnect protocol do deploy reverse VNC. This screenshot is from @malware_traffic's 2021-11-05 Bazar PCAP. The #BackConnect server was running on 87.120.8.190:9090

    #bazarloader #bazarbackdoor #backconnect
  3. SecurityLab @[email protected] ·

    IT-гигант Sopra Steria подвергся атаке вымогательского ПО Ryuk #кибератака, #Ryuk, #TrickBot, #BazarLoader securitylab.ru/news/513326.php twitter.com/SecurityLabnews/st

    #bazarloader #trickbot #ryuk #кибератака
  4. SecurityLab @[email protected] ·

    Операторы TrickBot используют вредонос BazarLoader для загрузки Ryuk #TrickBot, #BazarLoader securitylab.ru/news/513052.php twitter.com/SecurityLabnews/st

    #bazarloader #trickbot