AgentTesla -- SWIFT_Payment_Receipt_30062026.js SWIFT Lure, 12KHQszuj BTC | Yüksek
AgentTesla 354KB SWIFT_Payment_Receipt_30062026.js. SWIFT banka odeme makbuzu sosyal muhendislik. 12KHQszujJobtTeJIj + 1DQsERzx BTC.
Analyses de menaces complètes, IOC et rapports de recherche sur RAT, Infostealer, Backdoor et autres familles de malwares.
Babuk 422KB mmd khr.exe. Telegram Chat_ID fidye muzakeresi. "Your files have been encrypted!" notu. IsDebuggerPresent.
AgentTesla 354KB SWIFT_Payment_Receipt_30062026.js. SWIFT banka odeme makbuzu sosyal muhendislik. 12KHQszujJobtTeJIj + 1DQsERzx BTC.
Akira 1.08MB w.exe. akiralkzxzq2dsrzsrvbr2xgbbu2wgsmxryd4csgfameg52n7efvr2id.onion tam Tor C2. Sifreleme hata loglari.
Rhysida 1.26MB. rhysidafohrhyy2aszi7bm32...onion tam Tor. Masaustu duvar kagidi fidye notu. "Automated cybersecurity team alert" sosyal muhendislik.
SOVA Android 2.4MB. AccessibilityService overlay. Chrome hedefi. 200+ banka uygulaması. Rus siber suç forumu.
WarzoneRAT Ave Maria 363KB Vvdsupbjet.exe. 3RTQGYLSxTCktVeq4TikaIs + 3XTxJKLblG2RJW BTC ödemeler. $299 satış.
Hook Android 2.6MB ermak.apk. "Turn on Chrome Update to complete" sahte overlay. AccessibilityService. ic_chrome.xml sahte ikon.
SocGholish 262 byte JS stager. editions.seattlemysterylovers.com ele gecirilen kitap evi web sitesi. TA569 FakeUpdate.
ERMAC Android 2.9MB. kunibagivope.li DGA-benzeri .li domain. AccessibilityService overlay. WeChat + Chrome hedefi. Magecart mimarisi.
njRAT 49KB comfortconcept.exe. comfortconcept.com C2. NtSetInformationProcess anti-debug. Orta Dogu/MENA bolgesi yaygın.
Havoc C2 1.1MB implant. vboxguest, vboxmouse, vmware string tespiti. Modern red team C2. 2022 Cobalt Strike alternatifi.
Lazarus DPRK APT 553KB. livedrivefiles.com Google Drive taklidi C2 exfil. odata.me. NtQueryInformationProcess NT API anti-debug.
Mozi 199KB bin.sh Linux ELF. [cnc] konfigürasyon keyword. botv2 surum. DHT P2P tabanlı IoT botnet.
NetSupportRAT 201KB Rate_RATE_AGR_Jun29.exe. Meşru NetSupport Manager RMM aracının tehdit aktörü kötüye kullanımı. TA569.
DanaBot 1.4MB. İki katmanlı RSA+RC4 şifreleme. 2018 bankacılık trojanından 2022 Cobalt Strike dropper evrimi. Rus TA.
PikaBot 1.4MB Lisect_AVT_24003_G1B_54.exe. \\.\Global\ProcmonDebugLogger Process Monitor tespiti. NtCreateSection_Hook enjeksiyonu. [DLLPROTECT].
BruteRatel C4 696KB steam_monitor_02F90000.dll. Steam süreç izleyici taklidi DLL enjeksiyonu. Kırmızı takım C2 framework.
Yanluowang 408KB yan1.exe. C:\Users\cake\Desktop CryptoPP PDB. taskkill chrome*. Cisco/Walmart saldırısı.
YTStealer 501KB Chron.exe. Ent1re.Li .li domain C2. C:\Users\Administrator\Desktop\Secured\ PDB. YouTube kimlik bilgisi calisma.
NightSky 9.7MB. contact.nightsky.cyou. IEUser Desktop nightsky.bin PDB. YouTube dark web tutorial fidye notu. Tor .onion.