home.social

#ta570 — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #ta570, aggregated by home.social.

  1. Selena Larson @[email protected] ·

    #TA577 returned yesterday from their month long break to deliver #Qbot via URLs to zipped OneNote. #TA570 came back too (after the blog was sent for publishing) with OneNote attachments to deliver Qbot.

    #ta577 #qbot #ta570
  2. Selena Larson @[email protected] ·

    #TA577 returned yesterday from their month long break to deliver #Qbot via URLs to zipped OneNote. #TA570 came back too (after the blog was sent for publishing) with OneNote attachments to deliver Qbot.

    #ta577 #qbot #ta570
  3. Selena Larson @[email protected] ·

    #TA577 returned yesterday from their month long break to deliver #Qbot via URLs to zipped OneNote. #TA570 came back too (after the blog was sent for publishing) with OneNote attachments to deliver Qbot.

    #ta577 #qbot #ta570
  4. Selena Larson @[email protected] ·

    #TA577 returned yesterday from their month long break to deliver #Qbot via URLs to zipped OneNote. #TA570 came back too (after the blog was sent for publishing) with OneNote attachments to deliver Qbot.

    #ta570 #qbot #ta577
  5. Selena Larson @[email protected] ·

    #TA577 returned yesterday from their month long break to deliver #Qbot via URLs to zipped OneNote. #TA570 came back too (after the blog was sent for publishing) with OneNote attachments to deliver Qbot.

    #ta577 #qbot #ta570
  6. Opalsec :verified: @[email protected] ·

    #TA570 and #TA577 actors, distributing #Qakbot/#Qbot #malware have gotten in on the #OneNote action, delivering lures going undetected by many AV engines.

    Highest number of flags is 2/60 based on this C2 IP called by malicious OneNote lures:

    virustotal.com/gui/ip-address/

    TA570/Obama Sample: bazaar.abuse.ch/sample/b45ace5

    TA577/BB## Sample: bazaar.abuse.ch/sample/bd040a7

    #ta570 #ta577 #qakbot #malware #onenote
  7. Opalsec :verified: @[email protected] ·

    #TA570 and #TA577 actors, distributing #Qakbot/#Qbot #malware have gotten in on the #OneNote action, delivering lures going undetected by many AV engines.

    Highest number of flags is 2/60 based on this C2 IP called by malicious OneNote lures:

    virustotal.com/gui/ip-address/

    TA570/Obama Sample: bazaar.abuse.ch/sample/b45ace5

    TA577/BB## Sample: bazaar.abuse.ch/sample/bd040a7

    #ta570 #ta577 #qakbot #malware #onenote
  8. Opalsec :verified: @[email protected] ·

    #TA570 and #TA577 actors, distributing #Qakbot/#Qbot #malware have gotten in on the #OneNote action, delivering lures going undetected by many AV engines.

    Highest number of flags is 2/60 based on this C2 IP called by malicious OneNote lures:

    virustotal.com/gui/ip-address/

    TA570/Obama Sample: bazaar.abuse.ch/sample/b45ace5

    TA577/BB## Sample: bazaar.abuse.ch/sample/bd040a7

    #ta570 #ta577 #qakbot #malware #onenote
  9. Opalsec :verified: @[email protected] ·

    #TA570 and #TA577 actors, distributing #Qakbot/#Qbot #malware have gotten in on the #OneNote action, delivering lures going undetected by many AV engines.

    Highest number of flags is 2/60 based on this C2 IP called by malicious OneNote lures:

    virustotal.com/gui/ip-address/

    TA570/Obama Sample: bazaar.abuse.ch/sample/b45ace5

    TA577/BB## Sample: bazaar.abuse.ch/sample/bd040a7

    #onenote #malware #qakbot #ta577 #ta570
  10. Opalsec :verified: @[email protected] ·

    #TA570 and #TA577 actors, distributing #Qakbot/#Qbot #malware have gotten in on the #OneNote action, delivering lures going undetected by many AV engines.

    Highest number of flags is 2/60 based on this C2 IP called by malicious OneNote lures:

    virustotal.com/gui/ip-address/

    TA570/Obama Sample: bazaar.abuse.ch/sample/b45ace5

    TA577/BB## Sample: bazaar.abuse.ch/sample/bd040a7

    #ta570 #ta577 #qakbot #malware #onenote