home.social

#wormsweeklyioc — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #wormsweeklyioc, aggregated by home.social.

  1. #WormsWeeklyIoC have been released. This week features #RecordBreaker/#racconv2, #Amadey #Botnet, and a rework of my #Rhadamanthys #Stealer #IoC gathering.

    Find all indicators here:
    github.com/Gi7w0rm/MalwareConf

    The proudest release this week is 85 new #Rhadamanthys #Stealer #C2s not prior known to #Threatfox.

    I invite you all to vet those to make sure my new method of gathering works correctly :)
    Together with this week's #Raccoon #IoC, they are all in #OTX as well.

    otx.alienvault.com/user/@Gi7w0

    Interesting side note: One of the #IoC for #Rhadamanthys #Stealer is IP: 104.156.149[.]126.

    This IP has been attributed as an Indicator of #Sandworm / GRU Unit 74455 by Google:
    blog.google/threat-analysis-gr

    Stay safe out there <3

  2. #WormsWeeklyIoC have been released. This week features #RecordBreaker/#racconv2, #Amadey #Botnet, and a rework of my #Rhadamanthys #Stealer #IoC gathering.

    Find all indicators here:
    github.com/Gi7w0rm/MalwareConf

    The proudest release this week is 85 new #Rhadamanthys #Stealer #C2s not prior known to #Threatfox.

    I invite you all to vet those to make sure my new method of gathering works correctly :)
    Together with this week's #Raccoon #IoC, they are all in #OTX as well.

    otx.alienvault.com/user/@Gi7w0

    Interesting side note: One of the #IoC for #Rhadamanthys #Stealer is IP: 104.156.149[.]126.

    This IP has been attributed as an Indicator of #Sandworm / GRU Unit 74455 by Google:
    blog.google/threat-analysis-gr

    Stay safe out there <3