All posts tagged hack

■■■□□ IRIS is a web collaborative platform for incident response analysts allowing to share investigations at a technical level. https://github.com/dfir-iris/iris-web https://t.me/cKure/10617

■■■□□ A new version of the BRATA malware implements a functionality to perform a factory reset of the device to wipe all data. https://securityaffairs.co/wordpress/127131/cyber-crime/new-android-brata-rat.html https://t.me/cKure/10616

■■■□□ Windows Lateral Movement Part 2 – DCOM. https://www.mdsec.co.uk/2020/09/i-like-to-move-it-windows-lateral-movement-part-2-dcom/ https://t.me/cKure/10615

■■■■□ Hackers Using New Malware Packer DTPacker to Avoid Analysis, Detection. The malware uses multiple obfuscation techniques to evade antivirus, sandboxing, and analysis. https://thehackernews.com/2022/01/hackers-using-new-malware-packer.html https://t.me/cKure/10614

■■■□□ Interesting thread! LeakTheAnalyst gang opened a leak site on the darkweb. They opened a vote to select the target. As a result, one of the security companies was selected. And a few hours ago, they leaked data about the target security company. https://t.co/VvBcfCi717 https://t.me/cKure/10613

■■■■□ OSINT on REvil. https://www.curatedintel.org/2022/01/osint-on-revil.html https://t.me/cKure/10612

An interesting thread on SquirrelWaffle, Qakbot and Emotet using the same C2 servers linked to hundreds of websites from India https://twitter.com/1ZRR4H/status/1485413045975330822 https://t.me/cKure/10610

■□□□□ The United States’ FBI warns that cybercriminals are using malicious QR codes to steal their credentials and financial info. https://www.ic3.gov/Media/Y2022/PSA220118 https://t.me/cKure/10609

■■■■■ Tool for fuzzing Chrome’s javascript v8 engine; JS Raider. https://apt29a.blogspot.com/2022/01/fuzzing-chromes-javascript-engine-v8.html https://t.me/cKure/10607

■□□□□ Cybersecurity provider F5 released security patches to address 25 vulnerabilities affecting its BIG-IP, BIG-IQ, and NGINX products. https://securityaffairs.co/wordpress/127097/security/f5-big-ip-flaws.html https://t.me/cKure/10606