Spamhaus Malware Labs witnessed Smoke Loader (aka Dofoil) dropping a fresh Latrodectus sample yesterday π€π₯...full details below:
Compile timestamp: Thu May 09 11:08:17 2024
Payload URL:
π https://urlhaus.abuse.ch/url/2844417/
Latrodectus malware sample:
π https://bazaar.abuse.ch/sample/240677752d6ba09cc9f98275d694c500ed75808080fd6f8d750c16a526dc4ba7/
Botnet C2 domains:
π€ https://threatfox.abuse.ch/ioc/1268945/
π€ https://threatfox.abuse.ch/ioc/1268946/
β"locker_Apple_M1_64": 3e4bbd21756ae30c24ff7d6942656be024139f8180b7bddd4e5c62a9dfbd8c79 As much as I can tell, this is the first Apple's Mac devices targeting build of LockBit ransomware sample seen... Also is this a first for the "big name" gangs? π€ @patrickwardle cc @cyb3ropsβ
This #CyberMonday get FREE* #malware downloads for a limited** time! Use code MALWAREMONDAY22*** at checkout. Use the savings to buy a bigger hard drive for your RE machine!
#virus #trojan #worm #ransomware #rootkit #MalwareSample #CyberMonday2022
* The malware is always available for free.
** For as long as we keep the site online. We're in our 13th year of harvesting and redistributing malicious content to the infosec community. (Crazy, right?)
*** There is no checkout, but you do need to create a free account. Learn more at https://VirusShare.com/about
The Spamhaus Project
Dan 
VirusShare β£