D3LabAug 30, 2024

Campagne #Malware #Italy Week 35

๐Ÿ”ฅโ˜ ๏ธ๐Ÿ’ฃ๐Ÿ‘ป

#VIPKeylogger: Bonifico
#Remcos: Spedizioni
#Formbook: Ordini
#AgentTesla: Pagamento
#Modiloader: Preventivi
#APK #Zanubis: Protezione Device

#mwitaly

D3LabAug 9, 2024

Campagne #Malware #Italy Week 32
๐Ÿ”ฅโ˜ ๏ธ๐Ÿ’ฃ๐Ÿ‘ป

#SnakeKeyLogger: Citazione
#Guloader: Ordine
#Formbook: Modulo bancario
#AsyncRAT: Documento
#RemcosRAT: Prezzi
#AgentTesla: Preventivo
#ModiLoader: Pagamento
#StrRat: Ordine
#RedLine: Quotazione
#Vidar: Pagamento
#Ousaban: Documento

#mwitaly

The Threat CodexJul 31, 2024
Phishing targeting Polish SMBs continues via ModiLoader
#ModiLoader
https://www.welivesecurity.com/en/eset-research/phishing-targeting-polish-smbs-continues-modiloader/
Phishing targeting Polish SMBs continues via ModiLoader

ESET researchers detect multiple, widespread phishing campaigns that target SMBs in Poland during May 2024 with various malware families.

D3LabFeb 23, 2024

Campagne #Malware #Italy Week 08

๐Ÿ”ฅโ˜ ๏ธ๐Ÿ’ฃ๐Ÿ‘ป
#AgentTesla: Ordine
#Formbook: Bonifico
#SpyNote: APK Bank
#Pikabot: Resend
#AveMaria: Quote
#ModiLoader: Elenco
#WiKiloader: Fattura
#Astaroth: Fattura
#Remcos: Giacenza GLS

#mwitaly

SANS Internet Storm Center - SANS.edu - Go Sentinels!Jun 29, 2023
ISC Diary: @malware_traffic saw #GuLoader or #ModiLoader/#DBatLoader style traffic for #RemcosRAT https://i5c.us/d29990
SANS Internet Storm Center - SANS.edu - Go Sentinels!Jun 17, 2023
ISC Diary: @malware_traffic reviews #Formbook from possible #ModiLoader (#DBatLoader) https://i5c.us/d29958
SANS Internet Storm Center - SANS.edu - Go Sentinels!May 30, 2023
ISC Diary: @malware_traffic reviews a malspam-based #ModiLoader infection for #RemcosRAT https://i5c.us/d29896