Mastodawn

CrySome RAT : An Advanced Persistent .NET Remote Access Trojan - CYFIRMA

The CrySome RAT is an advanced, stealthy remote access trojan designed to survive system resets and evade detection, according to an analysis by security researchers at the Institute for Strategic Studies.

Pulse ID: 69cbc6158b16dc33d6f16b9b
Pulse Link: https://otx.alienvault.com/pulse/69cbc6158b16dc33d6f16b9b
Pulse Author: CyberHunter_NL
Created: 2026-03-31 13:03:17

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyFirma #CyberSecurity #ESET #InfoSec #NET #OTX #OpenThreatExchange #RAT #RemoteAccessTrojan #Trojan #bot #CyberHunter_NL

LevelBlue - Open Threat Exchange

Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

LevelBlue Open Threat Exchange

অর্ঘ্য 🏏📚 💻Jan 10, 2025

According to research from #Cyfirma, a new android infostealer called firescam, is sprading in the world, which pretends to be an .apk file for #Telegram premium mod app, found on a fake clone of the #RUstore.

Inside FireScam : An Information Stealer with Spyware Capabilities - CYFIRMA

Executive Summary At CYFIRMA, we are dedicated to providing current insights into prevalent threats and the strategies employed by malicious...

CYFIRMA

Metal Corley 🤘Jul 31, 2023

Hacker stehlen anscheinend Anruflisten, Textnachrichten und GPS Standortdaten über eine fake Android app namens 'SafeChat'.

Die Security Researcher von #CYFIRMA vermuten eine staatlich beauftragte, indische Hackergruppe hinter den Vorgängen.

#android #safechat

https://www.bleepingcomputer.com/news/security/hackers-steal-signal-whatsapp-user-data-with-fake-android-chat-app/

Hackers steal Signal, WhatsApp user data with fake Android chat app

Hackers are using a fake Android app named 'SafeChat' to infect devices with spyware malware that steals call logs, texts, and GPS locations from phones.

BleepingComputer

Gareth Emslie 🇿🇦 🇪🇦 🇨🇭Jan 5, 2023

Microsoft Sentinel is a cloud-based SIEM that allows users to import threat intelligence data for hunting, investigation and other analysis using the Threat Intelligence TAXII connector, Threat Intelligence Platform (TIP) connector or a flat file. Microsoft Sentinel has integrated with CYFIRMA to provide tailored external threat landscape insights. https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/arm-your-microsoft-sentinel-platform-with-industry-leading-cyber/ba-p/3693390 #MicrosoftSentinel #CYFIRMA

Arm Your Microsoft Sentinel Platform with Industry-Leading Cyber Threat Intelligence from CYFIRMA

Microsoft Sentinel is a cloud native SIEM that offers a variety of options to import threat intelligence data that can be used for hunting, investigation and other analysis. There are three ways to import rich threat intelligence data into Microsoft Sentinel – using the Threat Intelligence TAXII dat...

TECHCOMMUNITY.MICROSOFT.COM