#APT #Donot
CC: servings[.]info
Recently a lot of C2,you can find more😃
en.fofa.info/result?qbase64=…
x.threatbook.com/v5/survey?q…
zoomeye.org/searchResult?q=%…
#APT #SideWinder
Recently a lot of C2,you can find more😃
fofa.info/result?qbase64=Ik9…
x.threatbook.com/v5/survey?q…
#APT #Patchwork
some samples on VT,various hunting methods, you can find more😃
#APT #APT37 #CVE-2022-41128
Internet Explorer 0-day exploited by North Korean actor APT37
blog.google/threat-analysis-…
Show other iocs:
free-xmlformat[.]com
#APT paf-govt[.]com paf-govt[.]org tinlly[.]co hblbank[.]co net-pk[.]org supportgovpk[.]co gov-netpk[.]net marksafe[.]org paknavygov[.]org pak-navy[.]co file-server[.]co civix[.]site fenctor[.]top play-store[.]co paknavy[.]net reas[.]tech tinly[.]org direct88[.]org outlookk[.]co
some sample:
3b20946a0ed8d4320285b2f114047fed54761ec4005fc6ccc10fcf123cf15a97
#APT #VajraEleph #APT-Q-43
Anthor Sample hash
9115408ab7227f30cb6d3f785c208377b31da208171def1c3ec4d81c6f833585
Some clues indicate that the group is related to #Confucius🤡
#APT threat analysis report about #BlackTech:
"East Asian hacker organization BlackTech launches attacks against industries such as finance and education"
report:
mp.weixin.qq.com/s/m7wo0AD4y…
mp-weixin-qq-com.translate.g…
Timele12138 retweeted
#ESETresearch discovered a trojanized IDA Pro installer, distributed by the #Lazarus APT group. Attackers bundled the original IDA Pro 7.5 software developed by @HexRaysSA with two malicious components. @cherepanov74 1/5
#APT threat analysis report about #APT-C-59(芜琼洞):
"APT-C-59 (芜琼洞) organized the 2021 attack to reveal the secret"
report:
mp.weixin.qq.com/s/WBpML3BTx…
mp-weixin-qq-com.translate.g…
#APT threat analysis report about #India #Patchwork:
"Analysis of phishing attacks against countries such as China and the South Asian subcontinent"
report:
mp.weixin.qq.com/s/CGHDuJAb4…
mp-weixin-qq-com.translate.g…
#APT #SideWinder
hash:012afe154dda1f5b2fe5b630b37595d2756823f71cbe57bf6bd432ced32bcb0c
filename:keeda.docx
c2:paknavy.mofa[.]live



























