侍 𝑶𝒈𝒖𝒛𝒉𝒂𝒏 𝑨. 🇹🇷
@SmashTheKernel
Stoic. Principal Security Engineer Aquila non captat muscas ⚔️ I break stuff to make the world a safer place 1337 / ex-underground
Hi my friends in the cyber security ecosystem, my X account, which was suspended for about 4 years without knowing the reason, has been reactivated.Of course, there had to be retaliation by actors against the contributions made to this ecosystem. Here again and stronger than ever
Yeah all connected to the Cerberus BitBucket campaign:
Android Banker Incident From: yuklesm[.]org Name: 20gb_hediye_internet.apk Hash"d0c73e7bb87c22cac394ed5691b6557648152486362c5d8cf78cf7aaa088908c" virustotal.com/gui/file/d0c73… Target:🇹🇷 C2: binsletr[.]net @malwrhunterteam @LukasStefanko @JAMESWT_MHT #android #banker #malware
![SmashTheKernel's tweet image. Android Banker Incident
From: yuklesm[.]org
Name: 20gb_hediye_internet.apk
Hash"d0c73e7bb87c22cac394ed5691b6557648152486362c5d8cf78cf7aaa088908c"
virustotal.com/gui/file/d0c73…
Target:🇹🇷
C2: binsletr[.]net
@malwrhunterteam @LukasStefanko @JAMESWT_MHT
#android #banker #malware](https://pbs.twimg.com/media/EXu3PIIWsAA4xym.png)
Android Banker Incident Froms: sen-evdekal20gbkazan[.]com bitbucket[.]org/emreadamol/emreadamol34/downloads/20gbinternet-evdekal.apk 82d7f887ec682ef752f71119c5a31a415bd907864e0d207943a68916ec96b7b3 virustotal.com/gui/file/82d7f… C2: besieged[.]top @malwrhunterteam @LukasStefanko
![SmashTheKernel's tweet image. Android Banker Incident
Froms:
sen-evdekal20gbkazan[.]com
bitbucket[.]org/emreadamol/emreadamol34/downloads/20gbinternet-evdekal.apk
82d7f887ec682ef752f71119c5a31a415bd907864e0d207943a68916ec96b7b3
virustotal.com/gui/file/82d7f…
C2: besieged[.]top
@malwrhunterteam @LukasStefanko](https://pbs.twimg.com/media/EXu2hm6XsAAJQkb.png)
![SmashTheKernel's tweet image. Android Banker Incident
Froms:
sen-evdekal20gbkazan[.]com
bitbucket[.]org/emreadamol/emreadamol34/downloads/20gbinternet-evdekal.apk
82d7f887ec682ef752f71119c5a31a415bd907864e0d207943a68916ec96b7b3
virustotal.com/gui/file/82d7f…
C2: besieged[.]top
@malwrhunterteam @LukasStefanko](https://pbs.twimg.com/media/EXu2sLvXQAA9PeI.png)
![SmashTheKernel's tweet image. Android Banker Incident
Froms:
sen-evdekal20gbkazan[.]com
bitbucket[.]org/emreadamol/emreadamol34/downloads/20gbinternet-evdekal.apk
82d7f887ec682ef752f71119c5a31a415bd907864e0d207943a68916ec96b7b3
virustotal.com/gui/file/82d7f…
C2: besieged[.]top
@malwrhunterteam @LukasStefanko](https://pbs.twimg.com/media/EXu2v0RXYAEiYnM.jpg)
Indicator of Attack(IOA) vs. Indicator of Compromises(IOC) includes assets. The combination formed in the shadow of this conflict is Indicator of Pivoting (IOP) bit.ly/2YJnGPe #ThreatHunting #Threatanalysis #infosec
Anubis banking Trojan targets #Italy 🇮🇹 as Coronavirus map -campaign active from 21.03.2020 -server includes APK builder, with 130 already built APKs -~177 victims -C&C: https://files[.]ug
![LukasStefanko's tweet image. Anubis banking Trojan targets #Italy 🇮🇹 as Coronavirus map
-campaign active from 21.03.2020
-server includes APK builder, with 130 already built APKs
-~177 victims
-C&C: https://files[.]ug](https://pbs.twimg.com/media/EV-uYQOWkAQWDZk.jpg)
![LukasStefanko's tweet image. Anubis banking Trojan targets #Italy 🇮🇹 as Coronavirus map
-campaign active from 21.03.2020
-server includes APK builder, with 130 already built APKs
-~177 victims
-C&C: https://files[.]ug](https://pbs.twimg.com/media/EV-uacUXYAEVXHs.png)
![LukasStefanko's tweet image. Anubis banking Trojan targets #Italy 🇮🇹 as Coronavirus map
-campaign active from 21.03.2020
-server includes APK builder, with 130 already built APKs
-~177 victims
-C&C: https://files[.]ug](https://pbs.twimg.com/media/EV-ubZcWsAANrhx.png)
![LukasStefanko's tweet image. Anubis banking Trojan targets #Italy 🇮🇹 as Coronavirus map
-campaign active from 21.03.2020
-server includes APK builder, with 130 already built APKs
-~177 victims
-C&C: https://files[.]ug](https://pbs.twimg.com/media/EV-uckvXYAEREzn.png)
A Covid-19 Cerberus Botnet Incident IOC From: virus-covid[.]online Name: covidMappia_v1.0.3.apk Hash:"70439d393cca65ede64971d923ed61c0dd332dad5e2c31fdf8d225db1cf933e8" virustotal.com/gui/file/70439… @malwrhunterteam @LukasStefanko #Cerberus #Android #Malware
![SmashTheKernel's tweet image. A Covid-19 Cerberus Botnet Incident
IOC
From: virus-covid[.]online
Name: covidMappia_v1.0.3.apk
Hash:"70439d393cca65ede64971d923ed61c0dd332dad5e2c31fdf8d225db1cf933e8"
virustotal.com/gui/file/70439…
@malwrhunterteam @LukasStefanko
#Cerberus #Android #Malware](https://pbs.twimg.com/media/EV-c7sIWAAgi5tk.jpg)
A Covid-19 Cerberus Botnet Incident IOC From: virus-covid[.]online Name: covidMappia_v1.0.3.apk Hash:"70439d393cca65ede64971d923ed61c0dd332dad5e2c31fdf8d225db1cf933e8" virustotal.com/gui/file/70439… @malwrhunterteam @LukasStefanko #Cerberus #Android #Malware
An Anubis Botnet Incident Turkey🇹🇷 IOC From: evdekal-hediye-20gbnet[.]com Name: 20gb_hediye_internet.apk Hash:"7abe646fc8416e0f969a8b3c6ecf32140faf50f83af107192c9c2d2fe0b7b052" C&C: hxxp://ozkandan.com/o1o/a4.php virustotal.com/gui/file/7abe6… @malwrhunterteam @LukasStefanko #Anubis
![SmashTheKernel's tweet image. An Anubis Botnet Incident Turkey🇹🇷
IOC
From: evdekal-hediye-20gbnet[.]com
Name: 20gb_hediye_internet.apk
Hash:"7abe646fc8416e0f969a8b3c6ecf32140faf50f83af107192c9c2d2fe0b7b052"
C&C: hxxp://ozkandan.com/o1o/a4.php
virustotal.com/gui/file/7abe6…
@malwrhunterteam @LukasStefanko #Anubis](https://pbs.twimg.com/media/EV0rgHsWAAchF2_.jpg)
![SmashTheKernel's tweet image. An Anubis Botnet Incident Turkey🇹🇷
IOC
From: evdekal-hediye-20gbnet[.]com
Name: 20gb_hediye_internet.apk
Hash:"7abe646fc8416e0f969a8b3c6ecf32140faf50f83af107192c9c2d2fe0b7b052"
C&C: hxxp://ozkandan.com/o1o/a4.php
virustotal.com/gui/file/7abe6…
@malwrhunterteam @LukasStefanko #Anubis](https://pbs.twimg.com/media/EV0rkiNWoAQt0ja.jpg)
United States Trends
- 1. Packers 89.4K posts
- 2. Eagles 117K posts
- 3. Jordan Love 13.7K posts
- 4. #WWERaw 119K posts
- 5. Matt LaFleur 7,272 posts
- 6. Green Bay 17.8K posts
- 7. AJ Brown 6,119 posts
- 8. $MONTA 1,639 posts
- 9. Patullo 11.5K posts
- 10. #GoPackGo 7,605 posts
- 11. Smitty 5,231 posts
- 12. Jaelan Phillips 6,540 posts
- 13. Sirianni 4,514 posts
- 14. McManus 3,789 posts
- 15. Grayson Allen 2,886 posts
- 16. Cavs 10.2K posts
- 17. #MondayNightFootball 1,888 posts
- 18. Devonta Smith 5,411 posts
- 19. Pistons 14.4K posts
- 20. Wiggins 11.1K posts
Something went wrong.
Something went wrong.