PrecisionSec threat feeds offer curated #threatintelligence focused on malware and C2 frameworks that are typically utilized in an intrusion or incident.
Canada
Joined March 2012
- Tweets255
- Following731
- Followers365
- Likes89
PrecisionSec retweeted
#Remus #Stealer's ETH fallback C2 rotated (2026-10-21 ~18:00 UTC).
Contract 0x999941b74F6bbc921D5174A5b29911562cd2D7CF (eth_call 0xc2fb26a6) now returns:
hxxp://24hocst[.]help:2538/ (159.223.150[.]218)
#RemusStealer #EtherHiding
Our new PrecisionSec website is live!
It’s now easier to explore our threat intelligence feeds, preview detected indicators, find integrations, and access setup guides and API documentation.
See what’s new: precisionsec.com/blog/new-pr…
#ThreatIntelligence #ThreatDetection
We’re opening beta access to our new CTI @MaltegoHQ Transforms.
Built to help analysts pivot through high-confidence threat intelligence directly inside Maltego.
If you have a Maltego Professional license and are interested,reply here or DM us.
#ThreatIntelligence #CTI #DFIR
PrecisionSec retweeted
Join me at @BSidesVancouver on May 26 for my workshop "Precision #ThreatHunting: Unveiling Adversary Infrastructure using Free and Open Source Tools," designed to teach participants techniques for discovering and analyzing adversary infrastructure. Only 6 seats left! #OSINT
We are at #blackhat2022 and #defcon this year! If you are in Vegas this week, feel free to reach out for a demo of any of our feeds, meet for a beer or just to talk malware. DM's are open!
#BHUSA
#blackhat
#threatintelligence
1
Emotet is back! After many months of inactivity, we're seeing malicious documents downloading the typical follow up exe.
Our detection is holding and as always our customers are already protected by the latest #Emotet #IOCs:
precisionsec.com/threat-inte…
ALT Emotet Maldoc - 2020.7.17
1
Our #Emotet #IOC feed is up and running! Currently featuring a live feed of URL's distributing (internally verified) Emotet binaries. C2 IP's are available for customers in our private feed.
precisionsec.com/threat-inte…
Our #Lokibot #IOC feed has been updated to automatically include c2 URLs:
precisionsec.com/threat-inte…
PrecisionSec retweeted
#RevengeRAT #base64 hosted on #pastebin: hxxps://pastebin[.]com/e8grybhb
Some other interesting #powershell #malware posted by that user:
pastebin.com/u/jccdt
Product update: We've added #iceid / #bokbot and #ave_maria stealer detection to our #ThreatIntel feed and our Threat Analyst Platform. Register for a free trial here: precisionsec.com/free-trial/
#Emotet returns in 2019 after Holiday break hiatus. Our live Emotet #ThreatIntel feed is constantly updated with the latest Emotet #IOCs. Check it out here: precisionsec.com/threat-inte…
2018-11-5 #Emotet returns after nearly a month hiatus. New exe distribution URL's were updated in our Threat Feed:
precisionsec.com/threat-inte…
Sample VT:
virustotal.com/#/file/c17909…
#Phishing Campaign uses Hijacked Emails to Deliver #Ursnif by Replying to Ongoing Threads
blog.trendmicro.com/trendlab…
Nice writeup on recent changes to #Emotet delivery
Here's my write-up on the new Emotet version and the major updates in the malware. New Firewall/SRM evasion technique and single URI for final payload. blog.joshlemon.com.au/emotet…
PrecisionSec retweeted
[#Malware Analysis] IQY file embedded in PDF drops EXE with valid digital signature vmray.com/analyses/2c5729e17…