#gafgyt — Public Fediverse posts on home.social

abuse.ch :verified: @[email protected] · 2024-12-30 · 11:23 UTC

MalwareBazaar will now parse shell scripts automatically and will try to identify any payload URLs present in it 📄🔍👁️ This will make your life easier when hunting for Linux/Unix malware such as #Mirai and #Gafgyt 💪

Here's an example:
👉 https://bazaar.abuse.ch/sample/ec46f105b049d6674acbf45639883623f2f1cb3eed50eedb4b0e25a27a7b67e2/

#mirai #gafgyt

Not Simon @[email protected] · 2024-04-16 · 15:29 UTC

Fortinet warns that multiple botnets continue exploiting CVE-2023-1389 (8.8 high, disclosed 15 March 2023, added to CISA's KEV Catalog 01 May 2023) TP-Link command injection for wide-scale spread. Botnets include Moobot, Miroi, the Golang-based agent “AGoent,” and the Gafgyt Variant. The blog post explores their infection traffic patterns and offer insights into these botnets. 🔗 https://www.fortinet.com/blog/threat-research/botnets-continue-exploiting-cve-2023-1389-for-wide-scale-spread

#CVE_2023_1389 #TPLink #eitw #activeexploitation #botnet #moobot #miroi #agoent #mirai #gafgyt #threatintel #IOC

#cve_2023_1389 #tplink #eitw #activeexploitation #botnet #moobot

securityskeptic :donor: :verified: @[email protected] · 2023-03-14 · 14:13 UTC

Our Malware study for the calendar year 2022 is out!

Headline: Interisle reports that malware hosting activity in 2022 was most intense in China, India and United States

Information stealing and ransomware continue to rise, as does misuse of cloud and file sharing services for malware distribution. Also...

• Endpoint malware activity increased 50% over 2021. The Quackbot banking trojan was the most reported endpoint malware.

• IoT malware activity decreased in 2022. Mozi IoT malware reporting sharply declined in early 2022 but showed signs of renewed activity in 4Q 2022.

• 60% of reports identified malware that attacks or probes legitimate web sites. Nearly two-thirds of the reported probes were vulnerability scanners. PHP forum spammers accounted for one-third of attackware reported.

• The use of domain names in malware URLs grew sharply. Interisle found a 121% increase in the use of domain names in 4Q 2022.

• Attackers continued to exploit file sharing services and code repositories to distribute malware.

https://www.einpresswire.com/article/621395330/interisle-reports-that-malware-hosting-activity-in-2022-was-most-intense-in-china-india-and-united-states?r=paDW4MBm7CwDE0LM0l

#malware #cybercrime #quackbot #gafgyt #emotet #attackware