#emotet — Public Fediverse posts

JPCERT/CC、マルウェア「Emotet」のチェックツールの配布を終了 ～脆弱性あり、ただちに利用の停止を／オープンソースの「EmoCheck」
https://forest.watch.impress.co.jp/docs/news/2100704.html

#forest_watch_impress #Emotet #EmoCheck #セキュリティ #脆弱性 #Windows

Hackergruppe soll 170 Cyberangriffe verübt haben | Security https://www.heise.de/news/Hackergruppe-soll-170-Cyberangriffe-veruebt-haben-10484311.html #Malware #Ransomware #Trickbot #Emotet #Ryuk #WizardSpider

Hackergruppe soll 170 Cyberangriffe verübt haben | Security https://www.heise.de/news/Hackergruppe-soll-170-Cyberangriffe-veruebt-haben-10484311.html #Malware #Ransomware #Trickbot #Emotet #Ryuk #WizardSpider

20 Jahre #Melani: Die grössten Fälle - inside-it.ch https://www.inside-it.ch/20-jahre-melani-die-groessten-faelle-20241219 #Hacking #CyberCrime #Malware #Ransomware #DDoS #log4j #HeartBleed #Emotet #NotPetya #Stuxnet #WannaCry

@thebuggers
Nein, #Emotet hat mit "veraltet" nichts zu tun, sondern mit #Microsoft #Windows und höchstwahrscheinlich #Outlook. Ok, wenn du dieses Biotop "veraltet" nennen möchtest, bin ich dabei. https://www.pc-fluesterer.info/wordpress/2019/10/05/warnung-vor-angriffen-per-e-mail/
Die Tragik: Bei der erforderlichen Neueinrichtung der Systeme wurde natürlich nicht auf #FOSS gesetzt, sondern auf das "bewährte" 😂 alte. Die Lobby-Macht von M$ scheint weitgehend unüberwindlich. 😠

@thebuggers
Nein, #Emotet hat mit "veraltet" nichts zu tun, sondern mit #Microsoft #Windows und höchstwahrscheinlich #Outlook. Ok, wenn du dieses Biotop "veraltet" nennen möchtest, bin ich dabei. https://www.pc-fluesterer.info/wordpress/2019/10/05/warnung-vor-angriffen-per-e-mail/
Die Tragik: Bei der erforderlichen Neueinrichtung der Systeme wurde natürlich nicht auf #FOSS gesetzt, sondern auf das "bewährte" 😂 alte. Die Lobby-Macht von M$ scheint weitgehend unüberwindlich. 😠

🚨#IcedID, #Smokeloader, #SystemBC, #Pikabot and #Bumblebee botnets have been disrupted by Operation Endgame!! This is the largest operation EVER against botnets involved with ransomware, with gargantuan thanks to a coordinated effort led by international agencies 👏👏

As with the #Qakbot and #Emotet takedowns, Spamhaus are again providing remediation support - those affected will be contacted from today with steps to take.

👉 For more information, read our write-up here: https://www.spamhaus.org/resource-hub/malware/operation-endgame-botnets-disrupted-after-international-action/

#OperationENDGAME

🚨#IcedID, #Smokeloader, #SystemBC, #Pikabot and #Bumblebee botnets have been disrupted by Operation Endgame!! This is the largest operation EVER against botnets involved with ransomware, with gargantuan thanks to a coordinated effort led by international agencies 👏👏

As with the #Qakbot and #Emotet takedowns, Spamhaus are again providing remediation support - those affected will be contacted from today with steps to take.

👉 For more information, read our write-up here: https://www.spamhaus.org/resource-hub/malware/operation-endgame-botnets-disrupted-after-international-action/

#OperationENDGAME

Financial cyberthreats in 2023 – Source: securelist.com https://ciso2ciso.com/financial-cyberthreats-in-2023-source-securelist-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Financialmalware #Financialthreats #MicrosoftWindows #SpamandPhishing #Windowsmalware #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #Publications #TrojanBanker #Phishing #Emotet #QakBot #fraud

Financial cyberthreats in 2023 – Source: securelist.com https://ciso2ciso.com/financial-cyberthreats-in-2023-source-securelist-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #Financialmalware #Financialthreats #MicrosoftWindows #SpamandPhishing #Windowsmalware #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #Publications #TrojanBanker #Phishing #Emotet #QakBot #fraud

#emotet seems to be back https://www.trellix.com/en-us/about/newsroom/stories/research/icymi-emotet-reappeared-early-this-year-unfortunately.html?eid=6D51GUQV&smcid=LNO&utm_campaign=employee&utm_source=employee&utm_medium=organic&blaid=5042057 - #securiy - I know its 2 weeks old

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #CyberThreatIntelligence #Cyberthreatintelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Flashpoint: Qakbot Takedown: A Brief Victory in the Fight Against Resilient Malware https://flashpoint.io/blog/qakbot-takedown/ #Cyberthreatintelligence #CyberThreatIntelligence #Illicitcommunities #Currentevents #Cybercrime #Featured #botnets #emotet #qakbot #DOJ

Introducing the newest major @tidalcyber TTP intelligence content roundup, the Initial Access & Malware Delivery Landscape matrix, now live in our free Community Edition platform: https://app.tidalcyber.com/share/43836024-a194-4ac7-9659-b51e88632e7f

The matrix covers 25 major & emerging #malware typically used to gain early footholds in victim environments, often leading to ingress of more impactful threats, especially #ransomware, #infostealers, cryptominers, & more. It includes many recognizable names (#QakBot, #IcedID, #Emotet, #Bumblebee, #Gootloader) plus several newer and less-discussed threats

The matrix includes 13 custom Technique Sets for threats not currently tracked in the #mitreattack knowledge base. All technique references derive from a large volume of recent, public #threat reporting (click the labels in the ribbon at the top of the matrix to view relevant source URLs for each threat)

An interactive link analysis visualization of connections among these threats, also derived from public reports, is also available here: https://onodo.org/visualizations/235067/

Community Edition matrices support easy identification of shared (and outlier) techniques among multiple threats, and quick & easy overlay or pivoting to defensive & offensive security capabilities relevant to your own #security stack. We’ll have a blog out soon reviewing our analysis of top & trending techniques common among these initial access threats

Tidal’s #Adversary Intelligence team remains focused on providing up-to-date #TTPintelligence, especially around traditionally under-represented yet widely relevant threats like crimeware. Other popular matrices in this theme include our Ransomware & Data Extortion Landscape matrix (https://app.tidalcyber.com/share/9a0fd4e6-1daf-4f98-a91d-b73003eb2d6a) and Major & Emerging Infostealers matrix (https://app.tidalcyber.com/share/ec62f5e0-bd40-476b-a560-7ad2779ea9e3), which each cover 20+ threats

Financially motivated adversaries often display a rapid pace of #TTP evolution, and this is especially apparent for #initialaccess threats. Register for our webinar on May 31 dedicated to TTP evolution, its drivers, and discussion around what defenders can do to address it and its implications: https://hubs.la/Q01NC23k0

#SharedWithTidal #threatinformeddefense #malware #infostealer #cryptominer #IAB #blueteam #detectionengineering #purpleteam #cyber

URLhaus is operational for over 5 years, notifying hosting providers + network operators about malware hosted in their network 🪲 It's a shame that some hosting providers ignore abuse reports, spreading malware for over four years 🤯

Here's our current 💩-list 👇

AS38841 kbro 🇹🇼, spreading #hajime:
🌐 https://urlhaus.abuse.ch/url/86646/

AS23520 Columbus Networks 🇧🇸, spreading #hajime:
🌐 https://urlhaus.abuse.ch/url/91891/

AS29873 Newfold Digital 🇺🇸, spreading #FormBook:
🌐 https://urlhaus.abuse.ch/url/117832/

AS58955 Bangmod 🇹🇭, spreading #Emotet:
🌐 https://urlhaus.abuse.ch/url/200073/

📢 Tax season brings tax-related scams - The latest malspam attack infects targeted devices with the nasty #Emotet malware.

Learn more: https://www.hackread.com/irs-tax-forms-w-9-email-scam-emotet-malware/

#Security #Malware #IRS #Scam #Cybersecurity

Discovering An Unknown Infrastructure | ONYPHE
#Emotet #OpenResty
https://beta.onyphe.io/docs/use-cases/discovering-an-unknown-infrastructure

Ransomware: Emotet kehrt zurück – als OneNote-E-Mail-Anhang | heise online
https://heise.de/-7551285 #Cybercrime #Malware #Ransomware #Emotet

Dark Cat, Anubis and Keyhole are three variants of IcedID VNC backdoors that are activated during the final initial-access stages to initiate hands-on-keyboard activity. Nviso covers the modus operandi and includes screen recordings of the actors activity. Interesting to see how they interact with Explorer, Outlook and other applications.
#CTI #ThreatIntel #IcedID #Backdoor #Emotet
https://blog.nviso.eu/2023/03/20/icedids-vnc-backdoors-dark-cat-anubis-keyhole/

#Emotet #Ransomware klingelt wieder an der Türe - verwendet #OneNote Notizbücher zur Verbreitung, nachdem Makros in Word oder Excel sicherheitstechnisch verbrannt sind.

https://www.borncity.com/blog/2023/03/20/emotet-ist-im-mrz-2023-zurck-verbreitung-der-malware-ber-onenote-anhnge/

#Ransomware: #Emotet kehrt zurück – als #OneNote-E-Mail-Anhang | heise online https://www.heise.de/news/Ransomware-Emotet-kehrt-zurueck-als-OneNote-E-Mail-Anhang-7551285.html #Malware #CyberCrime #Microsoft #MicrosoftOffice

#CTI #ThreatIntel #Emotet

#Emotet está de vuelta después de una pausa de tres meses

https://blog.segu-info.com.ar/2023/03/emotet-esta-de-vuelta-despues-de-una.html

Kurz informiert: Emotet, Atomkraft für den Mond, Drohnenflüge, Original-iPhone

Unser werktäglicher News-Überblick fasst die wichtigsten Nachrichten des Tages kurz und knapp zusammen.

https://www.heise.de/news/Kurz-informiert-Emotet-Atomkraft-fuer-den-Mond-Drohnenfluege-Original-iPhone-7555096.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege

#Apple #Atomkraft #Cybercrime #Drohnen #Emotet #iPhone #kurzinformiert #Mond #Ransomware #news

Ransomware: Emotet kehrt zurück – als OneNote-E-Mail-Anhang

Die hochentwickelte Schadsoftware Emotet ist wieder aktiv. Sie findet in Form von bösartigen OneNote-Dateien ihren Weg in den E-Mail-Eingang potenzieller Opfer.

https://www.heise.de/news/Ransomware-Emotet-kehrt-zurueck-als-OneNote-E-Mail-Anhang-7551285.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege

#Cybercrime #Emotet #OfficeSuite #Security #Trojaner #news

Get up to speed on the week's infosec news before another week in the trenches:

https://opalsec.substack.com/p/soc-goulash-weekend-wrap-up-e05

Last week's patch Tuesday had SmartScreen bypasses and the Ping of Death, but nothing could beat the #Outlook zero-click credential leak that #Microsoft patche-er, uh, wait, no not quite patched - turns out you can still abuse it locally to harvest NTLM credentials, yikes!

Non-transitive trusts have one job - to enable cross-domain authentication between only the two domains that maintain it. Turns out, that's not the case - you can actually pivot between domains and forests, authenticating to Services well outside the intended scope of the trust. And Microsoft aren't going to fix it.

#Emotet have realised in week two of their return that there's more to life than Macros, and have joined in the abuse of #OneNote files to deliver their lures.

In the world of ransomware, #BianLian have opted to focus on exfil-and-extortion campaigns, after Avast released a pesky decryptor for their ransomware in January this year. #CISA have opened their books and shared a detailed profile on #LockBit 3.0's favoured TTPs and tooling that's worth a read.

#Google TAG have ousted Microsoft taking the easy way out in their previous patch of a SmartScreen bypass, opting to issue a half-baked patch that the #Magniber ransomware crew quickly circumvented, enabling them to deliver over 100,000 malicous lures unencumbered by the now-patched security control.

If you're running Adobe's ColdFusion, Aruba ClearPass, or SAP software - you're going to want to make sure you caught and patched these vulnerabilities that debuted last week.

#Redteam members have a new and improved AD lab environment to play in, as well as new evasion techniques for remote shells and macros to add to the toolkit!

Offensive Security have a gift for the #blueteam in the defensive Kali Purple distro, and we've caught a bunch of awesome write-ups to help in scaling Detection Engineering and mitigating common initial access vectors.

Catch all this and much more in this week's newsletter:

https://opalsec.substack.com/p/soc-goulash-weekend-wrap-up-e05

#infosec #cyber #news #cybernews #infosec #infosecnews #informationsecurity #cybersecurity #hacking #security #technology #hacker #vulnerability #vulnerabilities #malware #ransomware #dfir #soc #threatintel #threatintelligence #patchtuesday #adobe #ColdFusion #Aruba #ClearPass #SAP #Kali

Die #Malware #Emotet verbreitet sich jetzt auch über #OneNote-Dokumente. https://winfuture.de/news,135205.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia