efflux.io retweeted
Living on the edge today. Who needs a firewall anyway? 💜
@efflux_io #DEFCON #dc34 #InfoSec #OpenPorts
efflux.io retweeted
"Trust me bro" is a terrible security metric. Love that the new Efflux ships the actual raw evidence (certs, DNS, logs) instead of just handing you a vague, black-box risk score.
@efflux_io #infosec #OSINT #ThreatIntel
New efflux.io is live.
Attack surface intelligence that shows its work — every finding ships with the raw evidence (logs, fingerprints, certs, DNS) behind it. No black-box score to take on faith.
Try a free lookup, no account needed → efflux.io/
efflux.io retweeted
❤️ the sticker drop from @efflux_io attack surface intelligence that shows its work, not a black-box score. efflux.io
New efflux.io is live.
Attack surface intelligence that shows its work — every finding ships with the raw evidence (logs, fingerprints, certs, DNS) behind it. No black-box score to take on faith.
Try a free lookup, no account needed → efflux.io/
Guys who has the possiblity to help me? Please help me get this ip suspended evidence on picture 3.
ip : 107.189.7.133 is main ip being used by a large botnet.
akamai.com/blog/security-res…
1
82
#opendir 79.124.59.34 with bunch of series/movies in there although there is portal called ''stalker_portal"
😬😬😬😬
found on a ASN that hosts malicious activity.
56
#malware #atlantida #stealer
New C2 Panel : http://5.42.64.]32/login.php
see: rapid7.com/blog/post/2024/01…
45
#observer #Stealer #malware
C2: 5.42.66[.]25:3000
Ref:
app.any.run/tasks/7a36fb55-3…
Same IP host a never seen login page at root on port 80.
36
#amadey c2 discovered on
hxxp://193.233.132.73/gjvjlS3jd2V/Login.php
hash:
560aba847a47f07ccaaeded06dd799b134ef537d3b5239ae60df9c340d60ee33
26
#malware bunch of #Godzilla loader C2 have appeared on ip: 91.215.85[.]223
see: tracker.viriback.com/index.p…
29
#opendir https://91.92.254.14/
"XFiltr8.exe" appears to be an exfiltration tool (written in Go) that uses MEGA services for storage via g.api.mega.]co.]nz.
[+] bazaar.abuse.ch/sample/874ac…
▪ "C:/Users/187ir/Golang-Projects/XFiltr8/Builder/XFiltr8.go"
"Helpertask.exe" is #AsyncRAT
C2: 91.92.254.14:4412
[+] bazaar.abuse.ch/sample/15d27….
1
24
#opendir http://91.92.245.88/
- http://91.92.245.88/Neptune/
Neptune loader admin panel files exposed.
- http://91.92.245.88/u/
"ei.exe" bazaar.abuse.ch/sample/a2507… #XMRig
"einstall.exe" bazaar.abuse.ch/sample/a1e16… 🤔
🔎 The last binary deactivates and uninstalls MRT with "cmd.exe /c wusa /uninstall /kb:890830 /quiet /norestart".
1
28
efflux.io retweeted
We added six CVEs to our set this month and discuss the top talkers for 2023. Read on: f5.com/labs/articles/threat-…
