#risepro — Public Fediverse posts

Group-IB contributes to INTERPOL’s Operation Secure, leading to the arrest of 32 suspects linked to information stealer malware in Asia
#LummaStealer #RisePro #MetaStealer
https://www.group-ib.com/media-center/press-releases/interpol-infostealer-bust/

Group-IB contributes to INTERPOL’s Operation Secure, leading to the arrest of 32 suspects linked to information stealer malware in Asia
#LummaStealer #RisePro #MetaStealer
https://www.group-ib.com/media-center/press-releases/interpol-infostealer-bust/

Group-IB contributes to INTERPOL’s Operation Secure, leading to the arrest of 32 suspects linked to information stealer malware in Asia
#LummaStealer #RisePro #MetaStealer
https://www.group-ib.com/media-center/press-releases/interpol-infostealer-bust/

Group-IB contributes to INTERPOL’s Operation Secure, leading to the arrest of 32 suspects linked to information stealer malware in Asia
#LummaStealer #RisePro #MetaStealer
https://www.group-ib.com/media-center/press-releases/interpol-infostealer-bust/

Group-IB contributes to INTERPOL’s Operation Secure, leading to the arrest of 32 suspects linked to information stealer malware in Asia
#LummaStealer #RisePro #MetaStealer
https://www.group-ib.com/media-center/press-releases/interpol-infostealer-bust/

Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

This analysis explores the application of Generative AI, specifically Google's Gemini Advanced, in malware analysis. The experiment focuses on analyzing executable files, particularly a RisePro Stealer sample. The methodology involves decompiling the malware using Ghidra and IDA Pro, then using specific prompts with Gemini to analyze the code. The process aims to determine the file's verdict, understand its behavior, and identify Indicators of Compromise (IOCs). While Gemini proves useful in providing insights and aiding analysis, challenges such as handling large codebases and obfuscated code are noted. The study concludes that Gen AI can be a powerful tool in malware analysis when used in conjunction with traditional reverse engineering tools, but emphasizes the need for human expertise in interpreting results.

Pulse ID: 6704e576af1f6211f07703ad
Pulse Link: https://otx.alienvault.com/pulse/6704e576af1f6211f07703ad
Pulse Author: AlienVault
Created: 2024-10-08 07:55:34

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Google #InfoSec #Malware #OTX #OpenThreatExchange #RAT #RisePro #bot #AlienVault

Exploring GenAI in Cybersecurity: Gemini for Malware Analysis

This analysis explores the application of Generative AI, specifically Google's Gemini Advanced, in malware analysis. The experiment focuses on analyzing executable files, particularly a RisePro Stealer sample. The methodology involves decompiling the malware using Ghidra and IDA Pro, then using specific prompts with Gemini to analyze the code. The process aims to determine the file's verdict, understand its behavior, and identify Indicators of Compromise (IOCs). While Gemini proves useful in providing insights and aiding analysis, challenges such as handling large codebases and obfuscated code are noted. The study concludes that Gen AI can be a powerful tool in malware analysis when used in conjunction with traditional reverse engineering tools, but emphasizes the need for human expertise in interpreting results.

Pulse ID: 67040510a4893e6fac12fd06
Pulse Link: https://otx.alienvault.com/pulse/67040510a4893e6fac12fd06
Pulse Author: AlienVault
Created: 2024-10-07 15:58:08

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Google #InfoSec #Malware #OTX #OpenThreatExchange #RAT #RisePro #bot #AlienVault

Have you seen The Empire in your network?

A #cybercrime group, registered under “EVILEMPIRE”, is hosting dozens of #C2 servers between 185.172.128.0-185.172.128.255 including:
#RedLineStealer #LokiBot #HookBot #RisePro #Amadey #CobaltStrike #AsyncRAT #AMOS

Don’t let your computers enlist! Block 185.172.128.0/24 🔥

Have you seen The Empire in your network?

A #cybercrime group, registered under “EVILEMPIRE”, is hosting dozens of #C2 servers between 185.172.128.0-185.172.128.255 including:
#RedLineStealer #LokiBot #HookBot #RisePro #Amadey #CobaltStrike #AsyncRAT #AMOS

Don’t let your computers enlist! Block 185.172.128.0/24 🔥

Some very fresh #risepro:

https://app.any.run/tasks/f72ab643-4464-4280-b2c2-068570887dad/

Some very fresh #risepro:

https://app.any.run/tasks/f72ab643-4464-4280-b2c2-068570887dad/

Some very fresh #risepro:

https://app.any.run/tasks/f72ab643-4464-4280-b2c2-068570887dad/

A fresh #risepro sample:

https://app.any.run/tasks/236e360f-e88e-4d24-bca2-66431114e22a

c2
https://d-rise[.]cc/MWTSL/get_marks.php

cc @da_667 on traffic

A fresh #risepro sample:

https://app.any.run/tasks/236e360f-e88e-4d24-bca2-66431114e22a

c2
https://d-rise[.]cc/MWTSL/get_marks.php

cc @da_667 on traffic

A fresh #risepro sample:

https://app.any.run/tasks/236e360f-e88e-4d24-bca2-66431114e22a

c2
https://d-rise[.]cc/MWTSL/get_marks.php

cc @da_667 on traffic

A fresh #risepro sample:

https://app.any.run/tasks/236e360f-e88e-4d24-bca2-66431114e22a

c2
https://d-rise[.]cc/MWTSL/get_marks.php

cc @da_667 on traffic

📬 RisePro: Malware zielt auf Softwarepiraten
#DarkCommerce #Hacking #Flashpoint #Infostealer #Malware #RisePro #Sekoia #Softwarepiraten #Vidar https://tarnkappe.info/artikel/hacking/risepro-malware-zielt-auf-softwarepiraten-261504.html

📬 RisePro: Malware zielt auf Softwarepiraten
#DarkCommerce #Hacking #Flashpoint #Infostealer #Malware #RisePro #Sekoia #Softwarepiraten #Vidar https://tarnkappe.info/artikel/hacking/risepro-malware-zielt-auf-softwarepiraten-261504.html

📬 RisePro: Malware zielt auf Softwarepiraten
#DarkCommerce #Hacking #Flashpoint #Infostealer #Malware #RisePro #Sekoia #Softwarepiraten #Vidar https://tarnkappe.info/artikel/hacking/risepro-malware-zielt-auf-softwarepiraten-261504.html

📬 RisePro: Malware zielt auf Softwarepiraten
#DarkCommerce #Hacking #Flashpoint #Infostealer #Malware #RisePro #Sekoia #Softwarepiraten #Vidar https://tarnkappe.info/artikel/hacking/risepro-malware-zielt-auf-softwarepiraten-261504.html

📬 RisePro: Malware zielt auf Softwarepiraten
#DarkCommerce #Hacking #Flashpoint #Infostealer #Malware #RisePro #Sekoia #Softwarepiraten #Vidar https://tarnkappe.info/artikel/hacking/risepro-malware-zielt-auf-softwarepiraten-261504.html

Cyberkriminelle machen sich mit einem alten Trick auf die Suche nach Opfern: Sie ködern mit gecrackten Programmen und stellen dann stattdessen eine #Malware mit dem Namen #RisePro zum Download bereit. https://winfuture.de/news,133710.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

Cyberkriminelle machen sich mit einem alten Trick auf die Suche nach Opfern: Sie ködern mit gecrackten Programmen und stellen dann stattdessen eine #Malware mit dem Namen #RisePro zum Download bereit. https://winfuture.de/news,133710.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

Cyberkriminelle machen sich mit einem alten Trick auf die Suche nach Opfern: Sie ködern mit gecrackten Programmen und stellen dann stattdessen eine #Malware mit dem Namen #RisePro zum Download bereit. https://winfuture.de/news,133710.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

Cyberkriminelle machen sich mit einem alten Trick auf die Suche nach Opfern: Sie ködern mit gecrackten Programmen und stellen dann stattdessen eine #Malware mit dem Namen #RisePro zum Download bereit. https://winfuture.de/news,133710.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

Cyberkriminelle machen sich mit einem alten Trick auf die Suche nach Opfern: Sie ködern mit gecrackten Programmen und stellen dann stattdessen eine #Malware mit dem Namen #RisePro zum Download bereit. https://winfuture.de/news,133710.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia

A #risepro sample from Monday:

https://app.any.run/tasks/26e04633-a3c2-48ed-8e10-c388c516ee52#

https://flashpoint.io/blog/risepro-stealer-and-pay-per-install-malware-privateloader/

cc @da_667

A #risepro sample from Monday:

https://app.any.run/tasks/26e04633-a3c2-48ed-8e10-c388c516ee52#

https://flashpoint.io/blog/risepro-stealer-and-pay-per-install-malware-privateloader/

cc @da_667