home.social

#valleyrat — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #valleyrat, aggregated by home.social.

fetched live
  1. James_inthe_box @[email protected] ·

    Some 2 day old #valleyrat

    app.any.run/tasks/7a1480fa-e0f

    #valleyrat
  2. James_inthe_box @[email protected] ·

    Some 2 day old #valleyrat

    app.any.run/tasks/7a1480fa-e0f

    #valleyrat
  3. James_inthe_box @[email protected] ·

    Some 2 day old #valleyrat

    app.any.run/tasks/7a1480fa-e0f

    #valleyrat
  4. James_inthe_box @[email protected] ·

    Some 2 day old #valleyrat

    app.any.run/tasks/7a1480fa-e0f

    #valleyrat
  5. Daily CyberSecurity @[email protected] ·

    Discover how the SilverFox ValleyRAT attack leverages fake invoices and DLL side-loading to bypass defenses and target Japanese industrial firms.

    #SilverFox #ValleyRAT #Cybersecurity #PhishingAttack #MalwareAnalysis

    meterpreter.org/silverfox-vall

    #silverfox #valleyrat #cybersecurity #phishingattack #malwareanalysis
  6. Daily CyberSecurity @[email protected] ·

    Discover how the SilverFox ValleyRAT attack leverages fake invoices and DLL side-loading to bypass defenses and target Japanese industrial firms.

    #SilverFox #ValleyRAT #Cybersecurity #PhishingAttack #MalwareAnalysis

    meterpreter.org/silverfox-vall

    #malwareanalysis #phishingattack #cybersecurity #valleyrat #silverfox
  7. CyberNetsecIO @[email protected] ·

    📰 SilverFox APT Hits Japanese Manufacturer with Advanced ValleyRAT

    Chinese APT group SilverFox targets Japanese manufacturer with a sophisticated version of ValleyRAT. The campaign uses phishing, DLL sideloading, and vulnerable kernel drivers for stealthy, persistent access and espionage. #APT #ThreatIntel #ValleyRAT

    🔗 cyber.netsecops.io/articles/ch

    #apt #threatintel #valleyrat
  8. Japan @[email protected] ·

    SilverFox Targets Japanese Manufacturer With Advanced ValleyRAT Campaign

    SilverFox Targets Japanese Manufacturer With Advanced ValleyRAT Campaign Pierluigi Paganini July 31, 2026 SilverFox targeted a Japanese manufacturer…
    #EuropeSays #Japan #JP #apt #china #hacking #hackingnews #informationsecuritynews #ITInformationSecurity #Japanese #malware #PierluigiPaganini #SecurityAffairs #SecurityNews #SilverFox #ValleyRAT
    europesays.com/japan/66885/

    #valleyrat #silverfox #securitynews #securityaffairs #pierluigipaganini #malware
  9. Daily CyberSecurity @[email protected] ·

    Cato CTRL details a new SilverFox ValleyRAT campaign in Japan using three BYOVD drivers and DLL sideloading to kill security tools.

    #SilverFox #ValleyRAT #BYOVD #Winos40 #DLLSideloading #Malware #ThreatIntel #Cybersecurity

    securityonline.info/silverfox-

    #cybersecurity #threatintel #malware #dllsideloading #winos40 #byovd
  10. Daily CyberSecurity @[email protected] ·

    LevelBlue tracks a ValleyRAT malware email campaign using DLL sideloading and fileless execution to hit Japanese and Chinese users.

    #ValleyRAT #Malware #DLLSideloading #ThreatIntel

    securityonline.info/valleyrat-

    #valleyrat #malware #dllsideloading #threatintel
  11. Daily CyberSecurity @[email protected] ·

    LevelBlue tracks a ValleyRAT malware email campaign using DLL sideloading and fileless execution to hit Japanese and Chinese users.

    #ValleyRAT #Malware #DLLSideloading #ThreatIntel

    securityonline.info/valleyrat-

    #threatintel #dllsideloading #malware #valleyrat
  12. (in)sicurezza digitale @[email protected] ·

    VBScript via WhatsApp: documenti aziendali falsi installano ManageEngine RMM in campagna globale con tracce cinesi

    Kaspersky documenta una campagna malware attiva in 11 Paesi che usa WhatsApp per distribuire VBScript offuscati camuffati da documenti aziendali. Il payload finale è ManageEngine Endpoint Central, riconfigurato per il controllo remoto. L'infrastruttura mostra sovrapposizioni con Gh0st RAT e ValleyRAT.

    insicurezzadigitale.com/vbscri

    #malware #manageengine #phishing #rmm #trojan #valleyrat
  13. (in)sicurezza digitale @[email protected] ·

    VBScript via WhatsApp: documenti aziendali falsi installano ManageEngine RMM in campagna globale con tracce cinesi

    Kaspersky documenta una campagna malware attiva in 11 Paesi che usa WhatsApp per distribuire VBScript offuscati camuffati da documenti aziendali. Il payload finale è ManageEngine Endpoint Central, riconfigurato per il controllo remoto. L'infrastruttura mostra sovrapposizioni con Gh0st RAT e ValleyRAT.

    insicurezzadigitale.com/vbscri

    #malware #manageengine #phishing #rmm #trojan #valleyrat
  14. (in)sicurezza digitale @[email protected] ·

    VBScript via WhatsApp: documenti aziendali falsi installano ManageEngine RMM in campagna globale con tracce cinesi

    Kaspersky documenta una campagna malware attiva in 11 Paesi che usa WhatsApp per distribuire VBScript offuscati camuffati da documenti aziendali. Il payload finale è ManageEngine Endpoint Central, riconfigurato per il controllo remoto. L'infrastruttura mostra sovrapposizioni con Gh0st RAT e ValleyRAT.

    insicurezzadigitale.com/vbscri

    #malware #manageengine #phishing #rmm #trojan #valleyrat
  15. (in)sicurezza digitale @[email protected] ·

    VBScript via WhatsApp: documenti aziendali falsi installano ManageEngine RMM in campagna globale con tracce cinesi

    Kaspersky documenta una campagna malware attiva in 11 Paesi che usa WhatsApp per distribuire VBScript offuscati camuffati da documenti aziendali. Il payload finale è ManageEngine Endpoint Central, riconfigurato per il controllo remoto. L'infrastruttura mostra sovrapposizioni con Gh0st RAT e ValleyRAT.

    insicurezzadigitale.com/vbscri

    #valleyrat #trojan #rmm #phishing #manageengine #malware
  16. (in)sicurezza digitale @[email protected] ·

    VBScript via WhatsApp: documenti aziendali falsi installano ManageEngine RMM in campagna globale con tracce cinesi

    Kaspersky documenta una campagna malware attiva in 11 Paesi che usa WhatsApp per distribuire VBScript offuscati camuffati da documenti aziendali. Il payload finale è ManageEngine Endpoint Central, riconfigurato per il controllo remoto. L'infrastruttura mostra sovrapposizioni con Gh0st RAT e ValleyRAT.

    insicurezzadigitale.com/vbscri

    #malware #manageengine #phishing #rmm #trojan #valleyrat
  17. The Threat Codex @[email protected] ·

    TA4922: The Suspected Chinese Crime Group is Going Global
    #TA4922 #AtlasRAT #RomulusLoader #SilentRunLoader #ValleyRAT
    proofpoint.com/us/blog/threat-

    #ta4922 #atlasrat #romulusloader #silentrunloader #valleyrat
  18. The Threat Codex @[email protected] ·

    TA4922: The Suspected Chinese Crime Group is Going Global
    #TA4922 #AtlasRAT #RomulusLoader #SilentRunLoader #ValleyRAT
    proofpoint.com/us/blog/threat-

    #ta4922 #atlasrat #romulusloader #silentrunloader #valleyrat
  19. The Threat Codex @[email protected] ·

    TA4922: The Suspected Chinese Crime Group is Going Global
    #TA4922 #AtlasRAT #RomulusLoader #SilentRunLoader #ValleyRAT
    proofpoint.com/us/blog/threat-

    #ta4922 #atlasrat #romulusloader #silentrunloader #valleyrat
  20. (in)sicurezza digitale @[email protected] ·

    Una riunione urgente su Teams e il conto svuotato: la nuova truffa che sfrutta il panico da videocall

    C’è un dettaglio interessante nelle nuove campagne cyber che stanno circolando nelle ultime ore: non cercano più di sembrare sofisticate. Cercano di sembrare normali. Una notifica su Microsoft Teams. Un collega che chiede supporto. Una call urgente prima di una riunione. E pochi minuti dopo, credenziali rubate, malware installato o conti aziendali compromessi. Tra le notizie emerse nelle ultime ore nel panorama cybersecurity internazionale, una delle più interessanti riguarda […]

    insicurezzadigitale.com/una-ri

    #cyberpedia #microsoft #teams #valleyrat
  21. (in)sicurezza digitale @[email protected] ·

    Una riunione urgente su Teams e il conto svuotato: la nuova truffa che sfrutta il panico da videocall

    C’è un dettaglio interessante nelle nuove campagne cyber che stanno circolando nelle ultime ore: non cercano più di sembrare sofisticate. Cercano di sembrare normali. Una notifica su Microsoft Teams. Un collega che chiede supporto. Una call urgente prima di una riunione. E pochi minuti dopo, credenziali rubate, malware installato o conti aziendali compromessi. Tra le notizie emerse nelle ultime ore nel panorama cybersecurity internazionale, una delle più interessanti riguarda […]

    insicurezzadigitale.com/una-ri

    #cyberpedia #microsoft #teams #valleyrat
  22. (in)sicurezza digitale @[email protected] ·

    Una riunione urgente su Teams e il conto svuotato: la nuova truffa che sfrutta il panico da videocall

    C’è un dettaglio interessante nelle nuove campagne cyber che stanno circolando nelle ultime ore: non cercano più di sembrare sofisticate. Cercano di sembrare normali. Una notifica su Microsoft Teams. Un collega che chiede supporto. Una call urgente prima di una riunione. E pochi minuti dopo, credenziali rubate, malware installato o conti aziendali compromessi. Tra le notizie emerse nelle ultime ore nel panorama cybersecurity internazionale, una delle più interessanti riguarda […]

    insicurezzadigitale.com/una-ri

    #cyberpedia #microsoft #teams #valleyrat
  23. (in)sicurezza digitale @[email protected] ·

    Silver Fox lancia ABCDoor: spear phishing con loader Rust personalizzato contro India e Russia, nuova backdoor Python in campo

    Il gruppo APT cinese Silver Fox ha condotto campagne di spear phishing a tema fiscale contro organizzazioni in India e Russia, distribuendo il backdoor ValleyRAT affiancato da un nuovo payload Python inedito denominato ABCDoor. Kaspersky ha documentato il malware e le tecniche di evasione del loader RustSL, incluso il geofencing per paese e la persistenza tramite Phantom Persistence.

    insicurezzadigitale.com/silver

    #apt #backdoor #cina #infosec #malware #phishing
  24. (in)sicurezza digitale @[email protected] ·

    Silver Fox lancia ABCDoor: spear phishing con loader Rust personalizzato contro India e Russia, nuova backdoor Python in campo

    Il gruppo APT cinese Silver Fox ha condotto campagne di spear phishing a tema fiscale contro organizzazioni in India e Russia, distribuendo il backdoor ValleyRAT affiancato da un nuovo payload Python inedito denominato ABCDoor. Kaspersky ha documentato il malware e le tecniche di evasione del loader RustSL, incluso il geofencing per paese e la persistenza tramite Phantom Persistence.

    insicurezzadigitale.com/silver

    #apt #backdoor #cina #infosec #malware #phishing
  25. (in)sicurezza digitale @[email protected] ·

    Silver Fox lancia ABCDoor: spear phishing con loader Rust personalizzato contro India e Russia, nuova backdoor Python in campo

    Il gruppo APT cinese Silver Fox ha condotto campagne di spear phishing a tema fiscale contro organizzazioni in India e Russia, distribuendo il backdoor ValleyRAT affiancato da un nuovo payload Python inedito denominato ABCDoor. Kaspersky ha documentato il malware e le tecniche di evasione del loader RustSL, incluso il geofencing per paese e la persistenza tramite Phantom Persistence.

    insicurezzadigitale.com/silver

    #apt #backdoor #cina #infosec #malware #phishing
  26. CyberNetsecIO @[email protected] ·

    📰 Fake LINE Messenger Installer Spreads ValleyRAT Malware

    A fake LINE messenger installer is being used to spread ValleyRAT malware. The campaign, linked to the Silver Fox APT, targets Chinese-speaking users for credential theft. 🦊 #Malware #ValleyRAT #CyberSecurity

    🔗 cyber.netsecops.io/articles/fa

    #malware #valleyrat #cybersecurity
  27. The Threat Codex @[email protected] ·

    Fake Installer: Ultimately, ValleyRAT infection
    #ValleyRAT
    cybereason.com/blog/fake-insta

    #valleyrat
  28. The Threat Codex @[email protected] ·

    Fake Installer: Ultimately, ValleyRAT infection
    #ValleyRAT
    cybereason.com/blog/fake-insta

    #valleyrat
  29. The Threat Codex @[email protected] ·

    Fake Installer: Ultimately, ValleyRAT infection
    #ValleyRAT
    cybereason.com/blog/fake-insta

    #valleyrat
  30. James_inthe_box @[email protected] ·

    Some fresh (2025-12-18) #silverfox #valleyrat

    app.any.run/tasks/5f8778b4-7a5

    #silverfox #valleyrat
  31. James_inthe_box @[email protected] ·

    Some fresh (2025-12-18) #silverfox #valleyrat

    app.any.run/tasks/5f8778b4-7a5

    #silverfox #valleyrat
  32. James_inthe_box @[email protected] ·

    Some fresh (2025-12-18) #silverfox #valleyrat

    app.any.run/tasks/5f8778b4-7a5

    #silverfox #valleyrat
  33. Daniel Kuhl ✌🏻☮️☕️ @[email protected] ·

    #CheckPoint Research exposed #ValleyRAT’s modular system, including a kernel-mode #rootkit that can remain loadable on fully updated #Windows 11 despite built-in protections. The research linked leaked builder artifacts to plugins and identified about 6,000 samples, with roughly 85 percent emerging in the last six months after the builder’s public release.

    research.checkpoint.com/2025/c

    #checkpoint #valleyrat #rootkit #windows
  34. Daniel Kuhl ✌🏻☮️☕️ @[email protected] ·

    #CheckPoint Research exposed #ValleyRAT’s modular system, including a kernel-mode #rootkit that can remain loadable on fully updated #Windows 11 despite built-in protections. The research linked leaked builder artifacts to plugins and identified about 6,000 samples, with roughly 85 percent emerging in the last six months after the builder’s public release.

    research.checkpoint.com/2025/c

    #checkpoint #valleyrat #rootkit #windows
  35. TechNadu @[email protected] ·

    New analysis reveals a Silver Fox operation using a fake Microsoft Teams installer to deploy ValleyRAT in attacks targeting China-based users.

    The campaign mixes SEO poisoning, Cyrillic false-flag elements, DLL injection, and BYOVD techniques - making detection and attribution more challenging.

    Researchers also note a secondary chain using a trojanized Telegram installer.

    What’s your perspective on increased abuse of trusted-app installers in malware campaigns?

    Source: thehackernews.com/2025/12/silv

    💬 Join the discussion
    👍 Boost & follow for more threat intelligence

    #CyberSecurity #ThreatIntel #ValleyRAT #SilverFox #InfoSec #MalwareResearch #SecurityOps #CyberThreats

    #cybersecurity #threatintel #valleyrat #silverfox #infosec #malwareresearch
  36. MalwareAlias @[email protected] ·

    Mentioned Malware Families: ValleyRAT, PureRAT

    Aliases for ValleyRAT: win.valley_rat, Winos
    Malpedia link for ValleyRAT: malpedia.caad.fkie.fraunhofer.
    Aliases for PureRAT: win.pure_rat, PureHVNC, ResolverRAT
    Malpedia link for PureRAT: malpedia.caad.fkie.fraunhofer.

    #ValleyRAT #PureRAT

    Aliases provided by Malpedia.

    #valleyrat #purerat
  37. MalwareAlias @[email protected] ·

    Mentioned Malware Families: ValleyRAT, PureRAT

    Aliases for ValleyRAT: win.valley_rat, Winos
    Malpedia link for ValleyRAT: malpedia.caad.fkie.fraunhofer.
    Aliases for PureRAT: win.pure_rat, PureHVNC, ResolverRAT
    Malpedia link for PureRAT: malpedia.caad.fkie.fraunhofer.

    #ValleyRAT #PureRAT

    Aliases provided by Malpedia.

    #valleyrat #purerat
  38. MalwareAlias @[email protected] ·

    Mentioned Malware Families: ValleyRAT, PureRAT

    Aliases for ValleyRAT: win.valley_rat, Winos
    Malpedia link for ValleyRAT: malpedia.caad.fkie.fraunhofer.
    Aliases for PureRAT: win.pure_rat, PureHVNC, ResolverRAT
    Malpedia link for PureRAT: malpedia.caad.fkie.fraunhofer.

    #ValleyRAT #PureRAT

    Aliases provided by Malpedia.

    #valleyrat #purerat
  39. MalwareAlias @[email protected] ·

    Mentioned Malware Families: ValleyRAT, PureRAT

    Aliases for ValleyRAT: win.valley_rat, Winos
    Malpedia link for ValleyRAT: malpedia.caad.fkie.fraunhofer.
    Aliases for PureRAT: win.pure_rat, PureHVNC, ResolverRAT
    Malpedia link for PureRAT: malpedia.caad.fkie.fraunhofer.

    #ValleyRAT #PureRAT

    Aliases provided by Malpedia.

    #valleyrat #purerat
  40. MalwareAlias @[email protected] ·

    Mentioned Malware Families: ValleyRAT, PureRAT

    Aliases for ValleyRAT: win.valley_rat, Winos
    Malpedia link for ValleyRAT: malpedia.caad.fkie.fraunhofer.
    Aliases for PureRAT: win.pure_rat, PureHVNC, ResolverRAT
    Malpedia link for PureRAT: malpedia.caad.fkie.fraunhofer.

    #ValleyRAT #PureRAT

    Aliases provided by Malpedia.

    #valleyrat #purerat
  41. MalwareAlias @[email protected] ·

    Mentioned Malware Families: ValleyRAT, PureRAT

    Aliases for ValleyRAT: win.valley_rat, Winos
    Malpedia link for ValleyRAT: malpedia.caad.fkie.fraunhofer.
    Aliases for PureRAT: win.pure_rat, PureHVNC, ResolverRAT
    Malpedia link for PureRAT: malpedia.caad.fkie.fraunhofer.

    #ValleyRAT #PureRAT

    Aliases provided by Malpedia.

    #valleyrat #purerat
  42. 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @[email protected] ·

    RE: infosec.exchange/@VirusBulleti

    How is this #ValleyRAT? It looks, swims and quacks like #PureRAT.
    Here are some typical PureRAT indicators:
    :windows: .NET malware
    🔑 TLS version is 1.0
    🫆 JA3 fc54e0d16d9764783542f0146a98b300 / 07af4aa9e4d215a5ee63f9a0a277fbe3
    🫆 JA4 t10i070500_c50f5591e341_950472255fe9 / t10i060500_4dc025c38c38_950472255fe9
    🫆 JA3S b74704234e6128f33bff9865696e31b3
    📝 X.509 cert expires 9999-12-31 23:59:59 UTC
    📡 C2 often runs on TCP 56001
    All of them match on the sample analyzed in Trend's report

    #valleyrat #purerat
  43. 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @[email protected] ·

    RE: infosec.exchange/@VirusBulleti

    How is this #ValleyRAT? It looks, swims and quacks like #PureRAT.
    Here are some typical PureRAT indicators:
    :windows: .NET malware
    🔑 TLS version is 1.0
    🫆 JA3 fc54e0d16d9764783542f0146a98b300 / 07af4aa9e4d215a5ee63f9a0a277fbe3
    🫆 JA4 t10i070500_c50f5591e341_950472255fe9 / t10i060500_4dc025c38c38_950472255fe9
    🫆 JA3S b74704234e6128f33bff9865696e31b3
    📝 X.509 cert expires 9999-12-31 23:59:59 UTC
    📡 C2 often runs on TCP 56001
    All of them match on the sample analyzed in Trend's report

    #valleyrat #purerat
  44. 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @[email protected] ·

    RE: infosec.exchange/@VirusBulleti

    How is this #ValleyRAT? It looks, swims and quacks like #PureRAT.
    Here are some typical PureRAT indicators:
    :windows: .NET malware
    🔑 TLS version is 1.0
    🫆 JA3 fc54e0d16d9764783542f0146a98b300 / 07af4aa9e4d215a5ee63f9a0a277fbe3
    🫆 JA4 t10i070500_c50f5591e341_950472255fe9 / t10i060500_4dc025c38c38_950472255fe9
    🫆 JA3S b74704234e6128f33bff9865696e31b3
    📝 X.509 cert expires 9999-12-31 23:59:59 UTC
    📡 C2 often runs on TCP 56001
    All of them match on the sample analyzed in Trend's report

    #valleyrat #purerat
  45. MalwareAlias @[email protected] ·

    Mentioned Malware Families: PseudoManuscrypt, ValleyRAT

    Aliases for PseudoManuscrypt: win.pseudo_manuscrypt
    Malpedia link for PseudoManuscrypt: malpedia.caad.fkie.fraunhofer.
    Aliases for ValleyRAT: win.valley_rat, Winos
    Malpedia link for ValleyRAT: malpedia.caad.fkie.fraunhofer.

    #PseudoManuscrypt #ValleyRAT

    Aliases provided by Malpedia.

    #pseudomanuscrypt #valleyrat
  46. MalwareAlias @[email protected] ·

    Mentioned Malware Families: PseudoManuscrypt, ValleyRAT

    Aliases for PseudoManuscrypt: win.pseudo_manuscrypt
    Malpedia link for PseudoManuscrypt: malpedia.caad.fkie.fraunhofer.
    Aliases for ValleyRAT: win.valley_rat, Winos
    Malpedia link for ValleyRAT: malpedia.caad.fkie.fraunhofer.

    #PseudoManuscrypt #ValleyRAT

    Aliases provided by Malpedia.

    #pseudomanuscrypt #valleyrat
  47. Pyrzout :vm: @[email protected] ·

    ValleyRAT Campaign Targets Windows via WeChat and DingTalk gbhackers.com/valleyrat-campai #CyberSecurityNews #cybersecurity #ValleyRAT #Windows

    #cybersecuritynews #cybersecurity #valleyrat #windows
  48. Pyrzout :vm: @[email protected] ·

    ValleyRAT Campaign Targets Windows via WeChat and DingTalk gbhackers.com/valleyrat-campai #CyberSecurityNews #cybersecurity #ValleyRAT #Windows

    #cybersecuritynews #cybersecurity #valleyrat #windows
  49. Pyrzout :vm: @[email protected] ·

    ValleyRAT Campaign Targets Windows via WeChat and DingTalk gbhackers.com/valleyrat-campai #CyberSecurityNews #cybersecurity #ValleyRAT #Windows

    #cybersecuritynews #cybersecurity #valleyrat #windows
  50. Habr @[email protected] ·

    Злоумышленники перенимают опыт коллег: что общего между SilverFox и APT41. Разбор атаки

    Привет, Хабр! На связи Евгения Устинова, старший аналитик сетевой безопасности группы компаний «Гарда» . В статье хочу рассказать, как нам удалось связать инструментарий двух группировок через особенности реализации сетевых протоколов. Отследить эволюцию инструментов группировки SilverFox – например, ПО Winos – по отпечатку процедуры сетевой коммуникации оказалось довольно сложной задачей, поэтому я решила поделиться кейсом. Подключайтесь к расследованию

    habr.com/ru/companies/garda/ar

    #разбор_атаки #Winos #Silverfox #вредоносы #фишинг #ValleyRAT #apt41 #winnti

    #winnti #apt41 #valleyrat #фишинг #вредоносы #silverfox
  51. Habr @[email protected] ·

    Злоумышленники перенимают опыт коллег: что общего между SilverFox и APT41. Разбор атаки

    Привет, Хабр! На связи Евгения Устинова, старший аналитик сетевой безопасности группы компаний «Гарда» . В статье хочу рассказать, как нам удалось связать инструментарий двух группировок через особенности реализации сетевых протоколов. Отследить эволюцию инструментов группировки SilverFox – например, ПО Winos – по отпечатку процедуры сетевой коммуникации оказалось довольно сложной задачей, поэтому я решила поделиться кейсом. Подключайтесь к расследованию

    habr.com/ru/companies/garda/ar

    #разбор_атаки #Winos #Silverfox #вредоносы #фишинг #ValleyRAT #apt41 #winnti

    #winnti #apt41 #valleyrat #фишинг #вредоносы #silverfox
  52. Pyrzout :vm: @[email protected] ·

    Operation Silk Lure: Weaponizing Windows Scheduled Tasks for ValleyRAT Delivery gbhackers.com/operation-silk-l #CyberSecurityNews #cybersecurity #ValleyRAT #Windows

    #cybersecuritynews #cybersecurity #valleyrat #windows
  53. Pyrzout :vm: @[email protected] ·

    Operation Silk Lure: Weaponizing Windows Scheduled Tasks for ValleyRAT Delivery gbhackers.com/operation-silk-l #CyberSecurityNews #cybersecurity #ValleyRAT #Windows

    #cybersecuritynews #cybersecurity #valleyrat #windows
  54. Pyrzout :vm: @[email protected] ·

    Operation Silk Lure: Weaponizing Windows Scheduled Tasks for ValleyRAT Delivery gbhackers.com/operation-silk-l #CyberSecurityNews #cybersecurity #ValleyRAT #Windows

    #cybersecuritynews #cybersecurity #valleyrat #windows
  55. 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @[email protected] ·

    Gh0stKCP is a C2 transport protocol based on KCP. It has been used by #PseudoManuscrypt and #ValleyRAT.
    netresec.com/?b=259a5af

    #pseudomanuscrypt #valleyrat
  56. 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @[email protected] ·

    Gh0stKCP is a C2 transport protocol based on KCP. It has been used by #PseudoManuscrypt and #ValleyRAT.
    netresec.com/?b=259a5af

    #pseudomanuscrypt #valleyrat
  57. 𝙽𝙴𝚃𝚁𝙴𝚂𝙴𝙲 @[email protected] ·

    Gh0stKCP is a C2 transport protocol based on KCP. It has been used by #PseudoManuscrypt and #ValleyRAT.
    netresec.com/?b=259a5af

    #pseudomanuscrypt #valleyrat
  58. NETRESEC - Network Forensics and Network Security Monitoring @[email protected] ·

    Gh0stKCP Protocol

    web.brid.gy/r/https://www.netr

    #gh0stkcp #ghost #kcp #pseudomanuscrypt #winos40 #winos
  59. NETRESEC - Network Forensics and Network Security Monitoring @[email protected] ·

    Gh0stKCP Protocol

    web.brid.gy/r/https://www.netr

    #gh0stkcp #ghost #kcp #pseudomanuscrypt #winos40 #winos
  60. The Threat Codex @[email protected] ·

    Chasing the Silver Fox: Cat & Mouse in Kernel Shadows
    #SilverFox #ValleyRAT
    research.checkpoint.com/2025/s

    #silverfox #valleyrat