Have you seen The Empire in your network?

A #cybercrime group, registered under “EVILEMPIRE”, is hosting dozens of #C2 servers between 185.172.128.0-185.172.128.255 including:
#RedLineStealer #LokiBot #HookBot #RisePro #Amadey #CobaltStrike #AsyncRAT #AMOS

Don’t let your computers enlist! Block 185.172.128.0/24 🔥

[Threatview.io] 🌀Our telemetry from Proactive hunter for last 3 mnth - looks like #Hookbot is gaining popularity.

🔍Activity seem to corelate with availability of a cracked/ free hookbot panel one of the telegram channels

🛑 All IP's / Domains in our Daily blocklist published at our website and 🆓

#threatintel
#malware
#cti
#android