العربية
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어

#opendir نتائج البحث

cyberfeeddigest's profile picture. I deliver daily #DarkWeb ,#DeepWeb and #CTI feeds,and a bit of geopolitical clashes #Darkweb #Deepweb #Ransomware #Malware #Databreach #CTI #ThreatIntel
darkweb-deepwebfeed
 @cyberfeeddigest
1 س

A new #Opendir spotted: hxxps://www[.]danhinsley[.]com/downloads/ — contains 21 .EXE files. Handle with caution. Good source for #Malware analysts. #Opendir #Malware

cyberfeeddigest's tweet image. A new #Opendir spotted: hxxps://www[.]danhinsley[.]com/downloads/ — contains 21 .EXE files. Handle with caution. Good source for #Malware analysts. #Opendir #Malware
0
0
0
0
97
1ZRR4H's profile picture. 🏴‍☠️ OFFENSIVE-INTEL 🏴‍☠️ Cyber Threat Intelligence by Hackers | Security Researcher en https://t.co/rDrSxZASB3 | @CuratedIntel Member | 🥷🧠🇨🇱
Germán Fernández
@1ZRR4H
١٢ نوفمبرم

So, someone is running a social engineering campaign (#ClickFix) impersonating Rapid7 and using an old/abandoned domain that belonged to the same company? 🤔 🔸 https://rapid7labs[.]com/printer.html (#opendir) "Printer Vulnerability Remediation Steps" (possibly related to this…

1ZRR4H's tweet image. So, someone is running a social engineering campaign (#ClickFix) impersonating Rapid7 and using an old/abandoned domain that belonged to the same company? 🤔 🔸 https://rapid7labs[.]com/printer.html (#opendir) "Printer Vulnerability Remediation Steps" (possibly related to this…
1ZRR4H's tweet image. So, someone is running a social engineering campaign (#ClickFix) impersonating Rapid7 and using an old/abandoned domain that belonged to the same company? 🤔 🔸 https://rapid7labs[.]com/printer.html (#opendir) "Printer Vulnerability Remediation Steps" (possibly related to this…
1ZRR4H's tweet image. So, someone is running a social engineering campaign (#ClickFix) impersonating Rapid7 and using an old/abandoned domain that belonged to the same company? 🤔 🔸 https://rapid7labs[.]com/printer.html (#opendir) "Printer Vulnerability Remediation Steps" (possibly related to this…
1ZRR4H's tweet image. So, someone is running a social engineering campaign (#ClickFix) impersonating Rapid7 and using an old/abandoned domain that belonged to the same company? 🤔 🔸 https://rapid7labs[.]com/printer.html (#opendir) "Printer Vulnerability Remediation Steps" (possibly related to this…
1ZRR4H's profile picture. 🏴‍☠️ OFFENSIVE-INTEL 🏴‍☠️ Cyber Threat Intelligence by Hackers | Security Researcher en https://t.co/rDrSxZASB3 | @CuratedIntel Member | 🥷🧠🇨🇱
Germán Fernández
@1ZRR4H
١٢ نوفمبرم

🚩 #ClickFix ("Rapid7 IT Advisory") → macOS users → Apfell (red teaming framework). URL: https://security-usa[.]com:8443/printer.html (#opendir). "CRITICAL ADVISORY: Xerox Client Update Immediate action required for all Moose" + "If you're looking at this, this is part of a…

1ZRR4H's tweet image. 🚩 #ClickFix ("Rapid7 IT Advisory") → macOS users → Apfell (red teaming framework). URL: https://security-usa[.]com:8443/printer.html (#opendir). "CRITICAL ADVISORY: Xerox Client Update Immediate action required for all Moose" + "If you're looking at this, this is part of a…
1ZRR4H's tweet image. 🚩 #ClickFix ("Rapid7 IT Advisory") → macOS users → Apfell (red teaming framework). URL: https://security-usa[.]com:8443/printer.html (#opendir). "CRITICAL ADVISORY: Xerox Client Update Immediate action required for all Moose" + "If you're looking at this, this is part of a…
1ZRR4H's tweet image. 🚩 #ClickFix ("Rapid7 IT Advisory") → macOS users → Apfell (red teaming framework). URL: https://security-usa[.]com:8443/printer.html (#opendir). "CRITICAL ADVISORY: Xerox Client Update Immediate action required for all Moose" + "If you're looking at this, this is part of a…
1ZRR4H's tweet image. 🚩 #ClickFix ("Rapid7 IT Advisory") → macOS users → Apfell (red teaming framework). URL: https://security-usa[.]com:8443/printer.html (#opendir). "CRITICAL ADVISORY: Xerox Client Update Immediate action required for all Moose" + "If you're looking at this, this is part of a…
4
28
96
33
23ألف
1
16
85
24
20ألف
Merlax_'s profile picture. Dobby es un elfo libre 🆓 J & J 👨‍👩‍👧❤️
Merl
 @Merlax_
٢٥ أبريل ٢٠٢٤ م

#Malware KL Remota "Zeus" 🇧🇷 Payloads #Opendir hxxp://92.205.129.120/ Contador hxxps://3illeceara1e2.likescandy.com/ C2 92.205.231.]161:80

Merlax_'s tweet image. #Malware KL Remota "Zeus" 🇧🇷 Payloads #Opendir hxxp://92.205.129.120/ Contador hxxps://3illeceara1e2.likescandy.com/ C2 92.205.231.]161:80
Merlax_'s tweet image. #Malware KL Remota "Zeus" 🇧🇷 Payloads #Opendir hxxp://92.205.129.120/ Contador hxxps://3illeceara1e2.likescandy.com/ C2 92.205.231.]161:80
0
10
27
11
4ألف
medsci_yb3r's profile picture. #Indigenous Researcher del T8. Completing my MD/MSc. Specialized in: Applied Psych, BioSci, Native Studies, #Neuro & #Cybersecurity. #LongCovid Advocate.
White Coat Black Cat
@medsci_yb3r
٢ ديسمبرم

cc: @skocherhan @smica83 hxxp://freenet[.]am/~zombi #OpenDir thingy [ more your gig ]

medsci_yb3r's tweet image. cc: @skocherhan @smica83 hxxp://freenet[.]am/~zombi #OpenDir thingy [ more your gig ]
0
1
3
0
1ألف
James_inthe_box's profile picture.
James
 @James_inthe_box
١٠ يوليو ٢٠٢٤ م

Large #opendir at: http://57.180.253.244 medium confidence msbuild.exe is #ghostrat

James_inthe_box's tweet image. Large #opendir at: http://57.180.253.244 medium confidence msbuild.exe is #ghostrat
2
9
32
7
6ألف
1ZRR4H's profile picture. 🏴‍☠️ OFFENSIVE-INTEL 🏴‍☠️ Cyber Threat Intelligence by Hackers | Security Researcher en https://t.co/rDrSxZASB3 | @CuratedIntel Member | 🥷🧠🇨🇱
Germán Fernández
@1ZRR4H
١٢ نوفمبرم

🚩 #ClickFix ("Rapid7 IT Advisory") → macOS users → Apfell (red teaming framework). URL: https://security-usa[.]com:8443/printer.html (#opendir). "CRITICAL ADVISORY: Xerox Client Update Immediate action required for all Moose" + "If you're looking at this, this is part of a…

1ZRR4H's tweet image. 🚩 #ClickFix ("Rapid7 IT Advisory") → macOS users → Apfell (red teaming framework). URL: https://security-usa[.]com:8443/printer.html (#opendir). "CRITICAL ADVISORY: Xerox Client Update Immediate action required for all Moose" + "If you're looking at this, this is part of a…
1ZRR4H's tweet image. 🚩 #ClickFix ("Rapid7 IT Advisory") → macOS users → Apfell (red teaming framework). URL: https://security-usa[.]com:8443/printer.html (#opendir). "CRITICAL ADVISORY: Xerox Client Update Immediate action required for all Moose" + "If you're looking at this, this is part of a…
1ZRR4H's tweet image. 🚩 #ClickFix ("Rapid7 IT Advisory") → macOS users → Apfell (red teaming framework). URL: https://security-usa[.]com:8443/printer.html (#opendir). "CRITICAL ADVISORY: Xerox Client Update Immediate action required for all Moose" + "If you're looking at this, this is part of a…
1ZRR4H's tweet image. 🚩 #ClickFix ("Rapid7 IT Advisory") → macOS users → Apfell (red teaming framework). URL: https://security-usa[.]com:8443/printer.html (#opendir). "CRITICAL ADVISORY: Xerox Client Update Immediate action required for all Moose" + "If you're looking at this, this is part of a…
4
28
96
33
23ألف
Merlax_'s profile picture. Dobby es un elfo libre 🆓 J & J 👨‍👩‍👧❤️
Merl
 @Merlax_
٤ أكتوبر ٢٠٢٤ م

#Malware posible APT-C-36 🇨🇴 Remcos & njrat #Opendir hxxp://167.0.201.5/ hxxps://186.169.63.46/ hxxp://190.9.223.135/ hxxp://186.169.83.212/ C2 sost2024ene.]duckdns.]org:1213 remcosoct.]duckdns.]org:4576 02oct.]duckdns.]org:9001

Merlax_'s tweet image. #Malware posible APT-C-36 🇨🇴 Remcos & njrat #Opendir hxxp://167.0.201.5/ hxxps://186.169.63.46/ hxxp://190.9.223.135/ hxxp://186.169.83.212/ C2 sost2024ene.]duckdns.]org:1213 remcosoct.]duckdns.]org:4576 02oct.]duckdns.]org:9001
Merlax_'s tweet image. #Malware posible APT-C-36 🇨🇴 Remcos & njrat #Opendir hxxp://167.0.201.5/ hxxps://186.169.63.46/ hxxp://190.9.223.135/ hxxp://186.169.83.212/ C2 sost2024ene.]duckdns.]org:1213 remcosoct.]duckdns.]org:4576 02oct.]duckdns.]org:9001
3
26
119
57
12ألف
jstrosch's profile picture. Reverse engineer and content creater | 😱 1M+ views on YT | 🎙️ Host of Behind the Binary podcast 👇
Josh Stroschein | The Cyber Yeti
@jstrosch
١٥ أغسطس ٢٠٢٣ م

some #opendir (reverse) #base64 fun :) hxxp://52.152.223[.]228/

jstrosch's tweet image. some #opendir (reverse) #base64 fun :) hxxp://52.152.223[.]228/
jstrosch's tweet image. some #opendir (reverse) #base64 fun :) hxxp://52.152.223[.]228/
2
7
16
1
4ألف
lontze7's profile picture. Threat Intel Researcher. Opinions are mine. Special thanks to @censysio , @ValidinLLC & @ReversingLabs for making my research easier.
Lontz
 @lontze7
٣١ ديسمبرم

#DarkVisionRAT #opendir https://5.89.185[.]156/

lontze7's tweet image. #DarkVisionRAT #opendir https://5.89.185[.]156/
lontze7's tweet image. #DarkVisionRAT #opendir https://5.89.185[.]156/
lontze7's tweet image. #DarkVisionRAT #opendir https://5.89.185[.]156/
lontze7's tweet image. #DarkVisionRAT #opendir https://5.89.185[.]156/
1
5
46
12
7ألف
ShanHolo's profile picture. Another blue team member…..#CSIRT #DFIR #Malware #4n6 #ThreatIntel and following the white rabbit...
Shanholo
 @ShanHolo
١ أكتوبرم

🚨#Opendir #Malware🚨 hxxps://45.81.113.220/ ⚠️#QuasarRAT ☣️📸Client.exe➡️efffe2afbc5d8a0ad85b16155f0e1ed6 📡📸tcp://45.81.113.220:1605

ShanHolo's tweet image. 🚨#Opendir #Malware🚨 hxxps://45.81.113.220/ ⚠️#QuasarRAT ☣️📸Client.exe➡️efffe2afbc5d8a0ad85b16155f0e1ed6 📡📸tcp://45.81.113.220:1605
ShanHolo's tweet image. 🚨#Opendir #Malware🚨 hxxps://45.81.113.220/ ⚠️#QuasarRAT ☣️📸Client.exe➡️efffe2afbc5d8a0ad85b16155f0e1ed6 📡📸tcp://45.81.113.220:1605
ShanHolo's tweet image. 🚨#Opendir #Malware🚨 hxxps://45.81.113.220/ ⚠️#QuasarRAT ☣️📸Client.exe➡️efffe2afbc5d8a0ad85b16155f0e1ed6 📡📸tcp://45.81.113.220:1605
1
5
15
1
2ألف
leak_ix's profile picture. Provide comprehensive visibility into internet-facing assets. Looking for vulnerabilities and misconfigurations 24/7 since 2020. https://t.co/MEjkffN1xg
LeakIX
@leak_ix
١٠ ينايرم

💡No #opendir? Why don't you check for .DS_Store files listing the structure ? Our scans found 11,856,006 IPs and DNS exposing the file. Link: leakix.net/search?scope=l… Ref: 0day.work/parsing-the-ds…

leak_ix's tweet image. 💡No #opendir? Why don't you check for .DS_Store files listing the structure ? Our scans found 11,856,006 IPs and DNS exposing the file. Link: leakix.net/search?scope=l… Ref: 0day.work/parsing-the-ds…
0
8
25
10
3ألف
ShanHolo's profile picture. Another blue team member…..#CSIRT #DFIR #Malware #4n6 #ThreatIntel and following the white rabbit...
Shanholo
 @ShanHolo
٢٧ سبتمبرم

#Cloudflare sites with 🚨#Opendir #Malware🚨 1⃣hxxps://pretty-ebony-feeds-ericsson.trycloudflare.com/ 2⃣hxxps://watches-omaha-partnerships-median.trycloudflare.com/ 3⃣hxxps://static-obligations-baths-carnival.trycloudflare.com/

ShanHolo's tweet image. #Cloudflare sites with 🚨#Opendir #Malware🚨 1⃣hxxps://pretty-ebony-feeds-ericsson.trycloudflare.com/ 2⃣hxxps://watches-omaha-partnerships-median.trycloudflare.com/ 3⃣hxxps://static-obligations-baths-carnival.trycloudflare.com/
ShanHolo's tweet image. #Cloudflare sites with 🚨#Opendir #Malware🚨 1⃣hxxps://pretty-ebony-feeds-ericsson.trycloudflare.com/ 2⃣hxxps://watches-omaha-partnerships-median.trycloudflare.com/ 3⃣hxxps://static-obligations-baths-carnival.trycloudflare.com/
ShanHolo's tweet image. #Cloudflare sites with 🚨#Opendir #Malware🚨 1⃣hxxps://pretty-ebony-feeds-ericsson.trycloudflare.com/ 2⃣hxxps://watches-omaha-partnerships-median.trycloudflare.com/ 3⃣hxxps://static-obligations-baths-carnival.trycloudflare.com/
3
4
39
14
3ألف
James_inthe_box's profile picture.
James
 @James_inthe_box
٤ نوفمبرم

#malware #opendir at: http://179.43.176].109:8081/Downloads/1/

James_inthe_box's tweet image. #malware #opendir at: http://179.43.176].109:8081/Downloads/1/
James_inthe_box's tweet image. #malware #opendir at: http://179.43.176].109:8081/Downloads/1/
James_inthe_box's tweet image. #malware #opendir at: http://179.43.176].109:8081/Downloads/1/
James_inthe_box's tweet image. #malware #opendir at: http://179.43.176].109:8081/Downloads/1/
5
23
135
110
31ألف
Merlax_'s profile picture. Dobby es un elfo libre 🆓 J & J 👨‍👩‍👧❤️
Merl
 @Merlax_
١ ديسمبر ٢٠٢٣ م

#Opendir #Panel 🇧🇷 Sites: hxxp://74.207.237.97/ hxxp://24.152.39.178/contador/ hxxp://24.152.37.226/contador/

Merlax_'s tweet image. #Opendir #Panel 🇧🇷 Sites: hxxp://74.207.237.97/ hxxp://24.152.39.178/contador/ hxxp://24.152.37.226/contador/
Merlax_'s tweet image. #Opendir #Panel 🇧🇷 Sites: hxxp://74.207.237.97/ hxxp://24.152.39.178/contador/ hxxp://24.152.37.226/contador/
Merlax_'s tweet image. #Opendir #Panel 🇧🇷 Sites: hxxp://74.207.237.97/ hxxp://24.152.39.178/contador/ hxxp://24.152.37.226/contador/
2
14
79
24
14ألف
James_inthe_box's profile picture.
James
 @James_inthe_box
٢٣ مايو ٢٠٢٤ م

#malware #opendir at: http://invoicetrycloudflare\.com:9983/

James_inthe_box's tweet image. #malware #opendir at: http://invoicetrycloudflare\.com:9983/
1
5
27
7
5ألف
cyberfeeddigest's profile picture. I deliver daily #DarkWeb ,#DeepWeb and #CTI feeds,and a bit of geopolitical clashes #Darkweb #Deepweb #Ransomware #Malware #Databreach #CTI #ThreatIntel
darkweb-deepwebfeed
 @cyberfeeddigest
1 س

A new #Opendir spotted: hxxps://www[.]danhinsley[.]com/downloads/ — contains 21 .EXE files. Handle with caution. Good source for #Malware analysts. #Opendir #Malware

cyberfeeddigest's tweet image. A new #Opendir spotted: hxxps://www[.]danhinsley[.]com/downloads/ — contains 21 .EXE files. Handle with caution. Good source for #Malware analysts. #Opendir #Malware
0
0
0
0
97
smica83's profile picture. Threat Intel Specialist and Incident Responder. Private account. All opinions expressed here are mine only. https://t.co/7dQQO1JwUd
Szabolcs Schmidt
@smica83
٤ ديسمبرم

hxxps://mem-wedding-reputation-regulated.trycloudflare(.)com/ #WsgiDAV #opendir 'Rechnung_2025_11_33828247000801.pdf.lnk' bazaar.abuse.ch/sample/4045825…

smica83's tweet image. hxxps://mem-wedding-reputation-regulated.trycloudflare(.)com/ #WsgiDAV #opendir 'Rechnung_2025_11_33828247000801.pdf.lnk' bazaar.abuse.ch/sample/4045825…
smica83's tweet image. hxxps://mem-wedding-reputation-regulated.trycloudflare(.)com/ #WsgiDAV #opendir 'Rechnung_2025_11_33828247000801.pdf.lnk' bazaar.abuse.ch/sample/4045825…
0
1
4
1
303
cyberfeeddigest's profile picture. I deliver daily #DarkWeb ,#DeepWeb and #CTI feeds,and a bit of geopolitical clashes #Darkweb #Deepweb #Ransomware #Malware #Databreach #CTI #ThreatIntel
darkweb-deepwebfeed
 @cyberfeeddigest
٤ ديسمبرم

#Opendir hxxp://dl1[.]iranroid[.]com/software/persian_apps/. Hundreds of .apk files exposed. Good source for #Malware analysts — handle with caution. #Opendir #Malware

cyberfeeddigest's tweet image. #Opendir hxxp://dl1[.]iranroid[.]com/software/persian_apps/. Hundreds of .apk files exposed. Good source for #Malware analysts — handle with caution. #Opendir #Malware
0
0
3
1
661
ShanHolo's profile picture. Another blue team member…..#CSIRT #DFIR #Malware #4n6 #ThreatIntel and following the white rabbit...
Shanholo
 @ShanHolo
٣ ديسمبرم

#Payloads #Opendir hxxps://wedding-tray-interracial-authorities.trycloudflare.com/ BB1.txt➡️ 1⃣The script relaunches itself via PowerShell in mode hide 2⃣Opens a legit random PDF as decoy 3⃣Generates random filenames via custom function 4⃣📸⤵️Uses Base64-encoded C2 URLs

ShanHolo's tweet image. #Payloads #Opendir hxxps://wedding-tray-interracial-authorities.trycloudflare.com/ BB1.txt➡️ 1⃣The script relaunches itself via PowerShell in mode hide 2⃣Opens a legit random PDF as decoy 3⃣Generates random filenames via custom function 4⃣📸⤵️Uses Base64-encoded C2 URLs
ShanHolo's tweet image. #Payloads #Opendir hxxps://wedding-tray-interracial-authorities.trycloudflare.com/ BB1.txt➡️ 1⃣The script relaunches itself via PowerShell in mode hide 2⃣Opens a legit random PDF as decoy 3⃣Generates random filenames via custom function 4⃣📸⤵️Uses Base64-encoded C2 URLs
1
0
2
0
111
cyberfeeddigest's profile picture. I deliver daily #DarkWeb ,#DeepWeb and #CTI feeds,and a bit of geopolitical clashes #Darkweb #Deepweb #Ransomware #Malware #Databreach #CTI #ThreatIntel
darkweb-deepwebfeed
 @cyberfeeddigest
٣ ديسمبرم

#Opendir alert 🚨 An exposed directory found at hxxp://www[.]irai[.]com/pp/ containing 15 .EXE and 57 .apk files. Flagged by Google Chrome as “Dangerous”. Handle with caution. Good source for #Malware analysts. #Opendir #Malware

cyberfeeddigest's tweet image. #Opendir alert 🚨 An exposed directory found at hxxp://www[.]irai[.]com/pp/ containing 15 .EXE and 57 .apk files. Flagged by Google Chrome as “Dangerous”. Handle with caution. Good source for #Malware analysts. #Opendir #Malware
0
0
2
1
848
medsci_yb3r's profile picture. #Indigenous Researcher del T8. Completing my MD/MSc. Specialized in: Applied Psych, BioSci, Native Studies, #Neuro & #Cybersecurity. #LongCovid Advocate.
White Coat Black Cat
@medsci_yb3r
٢ ديسمبرم

cc: @skocherhan @smica83 hxxp://freenet[.]am/~zombi #OpenDir thingy [ more your gig ]

medsci_yb3r's tweet image. cc: @skocherhan @smica83 hxxp://freenet[.]am/~zombi #OpenDir thingy [ more your gig ]
0
1
3
0
1ألف
smica83's profile picture. Threat Intel Specialist and Incident Responder. Private account. All opinions expressed here are mine only. https://t.co/7dQQO1JwUd
Szabolcs Schmidt
@smica83
٢ ديسمبرم

Another #WsgiDAV #opendir hxxps://lens-facility-calvin-theorem.trycloudflare(.)com/ju/

smica83's tweet image. Another #WsgiDAV #opendir hxxps://lens-facility-calvin-theorem.trycloudflare(.)com/ju/
0
0
2
0
2ألف
BlinkzSec's profile picture. From Call Center Agent to Operation Centre Analyst 24/7 Shift Worker Interest in security - still a newbie
blinkz
@BlinkzSec
٢ ديسمبرم

There's nothing to see here, please move along. #opendir

BlinkzSec's tweet image. There's nothing to see here, please move along. #opendir
0
0
0
0
119
cyberfeeddigest's profile picture. I deliver daily #DarkWeb ,#DeepWeb and #CTI feeds,and a bit of geopolitical clashes #Darkweb #Deepweb #Ransomware #Malware #Databreach #CTI #ThreatIntel
darkweb-deepwebfeed
 @cyberfeeddigest
٣٠ نوفمبرم

#Opendir hxxps://www.launch[.]sk/download/. Contains 23 .apk files. Handle with caution — potential risk. Good source for #Malware analysts. #Opendir #Malware

cyberfeeddigest's tweet image. #Opendir hxxps://www.launch[.]sk/download/. Contains 23 .apk files. Handle with caution — potential risk. Good source for #Malware analysts. #Opendir #Malware
0
0
0
0
558
BlinkzSec's profile picture. From Call Center Agent to Operation Centre Analyst 24/7 Shift Worker Interest in security - still a newbie
blinkz
@BlinkzSec
٢٩ نوفمبرم

#opendir #remcos cc: @500mk500 @JAMESWT_WT hta. -> hex+XOR(0x37) -> powershell script -> download zip -> extract -> run exe SyAlpha16.exe -> FrameTrac32.exe -> remcos app.any.run/tasks/fcc2769d… "C2": [ "seguritypostload/.duckdns.org:1122" ], 👇 urlhaus.abuse.ch/host/192.159.9…

BlinkzSec's tweet image. #opendir #remcos cc: @500mk500 @JAMESWT_WT hta. -> hex+XOR(0x37) -> powershell script -> download zip -> extract -> run exe SyAlpha16.exe -> FrameTrac32.exe -> remcos app.any.run/tasks/fcc2769d… "C2": [ "seguritypostload/.duckdns.org:1122" ], 👇 urlhaus.abuse.ch/host/192.159.9…
BlinkzSec's tweet image. #opendir #remcos cc: @500mk500 @JAMESWT_WT hta. -> hex+XOR(0x37) -> powershell script -> download zip -> extract -> run exe SyAlpha16.exe -> FrameTrac32.exe -> remcos app.any.run/tasks/fcc2769d… "C2": [ "seguritypostload/.duckdns.org:1122" ], 👇 urlhaus.abuse.ch/host/192.159.9…
BlinkzSec's tweet image. #opendir #remcos cc: @500mk500 @JAMESWT_WT hta. -> hex+XOR(0x37) -> powershell script -> download zip -> extract -> run exe SyAlpha16.exe -> FrameTrac32.exe -> remcos app.any.run/tasks/fcc2769d… "C2": [ "seguritypostload/.duckdns.org:1122" ], 👇 urlhaus.abuse.ch/host/192.159.9…
3
5
24
4
2ألف
midnight_comms's profile picture. #osint #android #DFIR
APK-47
@midnight_comms
٢٦ نوفمبرم

This #opendir has got it all @HackingLZ - 83.147.241.206

0
0
4
1
329
BlinkzSec's profile picture. From Call Center Agent to Operation Centre Analyst 24/7 Shift Worker Interest in security - still a newbie
blinkz
@BlinkzSec
٢٢ نوفمبرم

Go away, there's nothing to see here. #opendir

BlinkzSec's tweet image. Go away, there's nothing to see here. #opendir
1
0
2
0
350
cyberfeeddigest's profile picture. I deliver daily #DarkWeb ,#DeepWeb and #CTI feeds,and a bit of geopolitical clashes #Darkweb #Deepweb #Ransomware #Malware #Databreach #CTI #ThreatIntel
darkweb-deepwebfeed
 @cyberfeeddigest
٢١ نوفمبرم

“#Opendir spotted — contains utility samples incl. a Handle with caution. Good source for #Malware analysts hxxps://silentdragon.com/

cyberfeeddigest's tweet image. “#Opendir spotted — contains utility samples incl. a Handle with caution. Good source for #Malware analysts hxxps://silentdragon.com/
0
0
0
1
627
cyberfeeddigest's profile picture. I deliver daily #DarkWeb ,#DeepWeb and #CTI feeds,and a bit of geopolitical clashes #Darkweb #Deepweb #Ransomware #Malware #Databreach #CTI #ThreatIntel
darkweb-deepwebfeed
 @cyberfeeddigest
٢١ نوفمبرم

“#Opendir spotted — contains utility samples incl. a port-scanner .exe. Handle with caution. Good source for #Malware analysts hxxp://173.212.252.156:60000/HW/Utility/

cyberfeeddigest's tweet image. “#Opendir spotted — contains utility samples incl. a port-scanner .exe. Handle with caution. Good source for #Malware analysts hxxp://173.212.252.156:60000/HW/Utility/
0
0
3
1
794
cyberfeeddigest's profile picture. I deliver daily #DarkWeb ,#DeepWeb and #CTI feeds,and a bit of geopolitical clashes #Darkweb #Deepweb #Ransomware #Malware #Databreach #CTI #ThreatIntel
darkweb-deepwebfeed
 @cyberfeeddigest
٢١ نوفمبرم

🚨 #Opendir spotted at hxxp://info.elf.stuba.sk/packages/pub/pc/comm/ Hosting 478 .EXE files. Handle with caution. Useful for #Malware analysts. Includes: netscan.exe, portscan, ipscan25.exe, netscan #Opendir #Malware

cyberfeeddigest's tweet image. 🚨 #Opendir spotted at hxxp://info.elf.stuba.sk/packages/pub/pc/comm/ Hosting 478 .EXE files. Handle with caution. Useful for #Malware analysts. Includes: netscan.exe, portscan, ipscan25.exe, netscan #Opendir #Malware
0
0
0
0
485
cyberfeeddigest's profile picture. I deliver daily #DarkWeb ,#DeepWeb and #CTI feeds,and a bit of geopolitical clashes #Darkweb #Deepweb #Ransomware #Malware #Databreach #CTI #ThreatIntel
darkweb-deepwebfeed
 @cyberfeeddigest
٢١ نوفمبرم

🚨 #Opendir found at hxxps://cloudio[.]dedyn[.]io/~dio/ flagged by Chrome as dangerous. Handle with caution. Useful for #Malware analysts. Sample files include: FTSDeskUpdate.exe, SpaceSniffer.exe, netscan.exe/zip, putty.exe, sleep.exe.

cyberfeeddigest's tweet image. 🚨 #Opendir found at hxxps://cloudio[.]dedyn[.]io/~dio/ flagged by Chrome as dangerous. Handle with caution. Useful for #Malware analysts. Sample files include: FTSDeskUpdate.exe, SpaceSniffer.exe, netscan.exe/zip, putty.exe, sleep.exe.
1
1
6
7
4ألف
eqv_sec's profile picture. Blue Teamer - Malware Enthusiast
EQVSec
@eqv_sec
٢٠ نوفمبرم

New domain, same #OpenDir + new #malware directory. libertytrading-biz[.]com/pure/APPDATA[.]exe "APPDATA.exe" - app.any.run/tasks/99bcb3f6… #stealer #purehvnc #netreactor #zgrat @anyrun_app

eqv_sec's profile picture. Blue Teamer - Malware Enthusiast
EQVSec
@eqv_sec
١٣ نوفمبرم

🧵 www[.]packinqsolutionsindia[.]com - An interesting collection of #RMM dropper and #Phishing pages in an #OpenDir #SimpleHelp #ConnectWise #LogMeInResolve etc. Impersonates @SocialSecurity @CanRevAgency @Intuit @QuickBooks @onedrive @TencentGlobal etc. Operation has been…

eqv_sec's tweet image. 🧵 www[.]packinqsolutionsindia[.]com - An interesting collection of #RMM dropper and #Phishing pages in an #OpenDir #SimpleHelp #ConnectWise #LogMeInResolve etc. Impersonates @SocialSecurity @CanRevAgency @Intuit @QuickBooks @onedrive @TencentGlobal etc. Operation has been…
1
0
1
0
397
1
0
2
1
174
lontze7's profile picture. Threat Intel Researcher. Opinions are mine. Special thanks to @censysio , @ValidinLLC & @ReversingLabs for making my research easier.
Lontz
 @lontze7
٣١ ديسمبرم

#DarkVisionRAT #opendir https://5.89.185[.]156/

lontze7's tweet image. #DarkVisionRAT #opendir https://5.89.185[.]156/
lontze7's tweet image. #DarkVisionRAT #opendir https://5.89.185[.]156/
lontze7's tweet image. #DarkVisionRAT #opendir https://5.89.185[.]156/
lontze7's tweet image. #DarkVisionRAT #opendir https://5.89.185[.]156/
1
5
46
12
7ألف
ShanHolo's profile picture. Another blue team member…..#CSIRT #DFIR #Malware #4n6 #ThreatIntel and following the white rabbit...
Shanholo
 @ShanHolo
١ أكتوبرم

🚨#Opendir #Malware🚨 hxxps://45.81.113.220/ ⚠️#QuasarRAT ☣️📸Client.exe➡️efffe2afbc5d8a0ad85b16155f0e1ed6 📡📸tcp://45.81.113.220:1605

ShanHolo's tweet image. 🚨#Opendir #Malware🚨 hxxps://45.81.113.220/ ⚠️#QuasarRAT ☣️📸Client.exe➡️efffe2afbc5d8a0ad85b16155f0e1ed6 📡📸tcp://45.81.113.220:1605
ShanHolo's tweet image. 🚨#Opendir #Malware🚨 hxxps://45.81.113.220/ ⚠️#QuasarRAT ☣️📸Client.exe➡️efffe2afbc5d8a0ad85b16155f0e1ed6 📡📸tcp://45.81.113.220:1605
ShanHolo's tweet image. 🚨#Opendir #Malware🚨 hxxps://45.81.113.220/ ⚠️#QuasarRAT ☣️📸Client.exe➡️efffe2afbc5d8a0ad85b16155f0e1ed6 📡📸tcp://45.81.113.220:1605
1
5
15
1
2ألف
James_inthe_box's profile picture.
James
 @James_inthe_box
٢٣ مايو ٢٠٢٤ م

#malware #opendir at: http://invoicetrycloudflare\.com:9983/

James_inthe_box's tweet image. #malware #opendir at: http://invoicetrycloudflare\.com:9983/
1
5
27
7
5ألف
Merlax_'s profile picture. Dobby es un elfo libre 🆓 J & J 👨‍👩‍👧❤️
Merl
 @Merlax_
٢٥ أبريل ٢٠٢٤ م

#Malware KL Remota "Zeus" 🇧🇷 Payloads #Opendir hxxp://92.205.129.120/ Contador hxxps://3illeceara1e2.likescandy.com/ C2 92.205.231.]161:80

Merlax_'s tweet image. #Malware KL Remota "Zeus" 🇧🇷 Payloads #Opendir hxxp://92.205.129.120/ Contador hxxps://3illeceara1e2.likescandy.com/ C2 92.205.231.]161:80
Merlax_'s tweet image. #Malware KL Remota "Zeus" 🇧🇷 Payloads #Opendir hxxp://92.205.129.120/ Contador hxxps://3illeceara1e2.likescandy.com/ C2 92.205.231.]161:80
0
10
27
11
4ألف
James_inthe_box's profile picture.
James
 @James_inthe_box
١٧ فبرايرم

#phishing #opendir: https://dmc.otarvesq\.com/POST/

James_inthe_box's tweet image. #phishing #opendir: https://dmc.otarvesq\.com/POST/
1
7
21
3
2ألف
James_inthe_box's profile picture.
James
 @James_inthe_box
٢٩ يوليو ٢٠٢٤ م

#malware #opendir #asyncrat at: http://horus-protector\.pro/d/

James_inthe_box's tweet image. #malware #opendir #asyncrat at: http://horus-protector\.pro/d/
4
9
27
3
3ألف
James_inthe_box's profile picture.
James
 @James_inthe_box
١٧ أبريلم

#malware #opendir at: http://176.65.134\.79/HOST/

James_inthe_box's tweet image. #malware #opendir at: http://176.65.134\.79/HOST/
3
6
28
7
3ألف
Merlax_'s profile picture. Dobby es un elfo libre 🆓 J & J 👨‍👩‍👧❤️
Merl
 @Merlax_
٤ أكتوبر ٢٠٢٤ م

#Malware posible APT-C-36 🇨🇴 Remcos & njrat #Opendir hxxp://167.0.201.5/ hxxps://186.169.63.46/ hxxp://190.9.223.135/ hxxp://186.169.83.212/ C2 sost2024ene.]duckdns.]org:1213 remcosoct.]duckdns.]org:4576 02oct.]duckdns.]org:9001

Merlax_'s tweet image. #Malware posible APT-C-36 🇨🇴 Remcos & njrat #Opendir hxxp://167.0.201.5/ hxxps://186.169.63.46/ hxxp://190.9.223.135/ hxxp://186.169.83.212/ C2 sost2024ene.]duckdns.]org:1213 remcosoct.]duckdns.]org:4576 02oct.]duckdns.]org:9001
Merlax_'s tweet image. #Malware posible APT-C-36 🇨🇴 Remcos & njrat #Opendir hxxp://167.0.201.5/ hxxps://186.169.63.46/ hxxp://190.9.223.135/ hxxp://186.169.83.212/ C2 sost2024ene.]duckdns.]org:1213 remcosoct.]duckdns.]org:4576 02oct.]duckdns.]org:9001
3
26
119
57
12ألف
Merlax_'s profile picture. Dobby es un elfo libre 🆓 J & J 👨‍👩‍👧❤️
Merl
 @Merlax_
١ ديسمبر ٢٠٢٣ م

#Opendir #Panel 🇧🇷 Sites: hxxp://74.207.237.97/ hxxp://24.152.39.178/contador/ hxxp://24.152.37.226/contador/

Merlax_'s tweet image. #Opendir #Panel 🇧🇷 Sites: hxxp://74.207.237.97/ hxxp://24.152.39.178/contador/ hxxp://24.152.37.226/contador/
Merlax_'s tweet image. #Opendir #Panel 🇧🇷 Sites: hxxp://74.207.237.97/ hxxp://24.152.39.178/contador/ hxxp://24.152.37.226/contador/
Merlax_'s tweet image. #Opendir #Panel 🇧🇷 Sites: hxxp://74.207.237.97/ hxxp://24.152.39.178/contador/ hxxp://24.152.37.226/contador/
2
14
79
24
14ألف
James_inthe_box's profile picture.
James
 @James_inthe_box
١٠ سبتمبر ٢٠٢٤ م

#venomrat #opendir at: http://trackingshipmentt\.xyz:9394/ http://trackmyshipeng\.site:9094/ app.any.run/tasks/086f767d…

James_inthe_box's tweet image. #venomrat #opendir at: http://trackingshipmentt\.xyz:9394/ http://trackmyshipeng\.site:9094/ app.any.run/tasks/086f767d…
James_inthe_box's tweet image. #venomrat #opendir at: http://trackingshipmentt\.xyz:9394/ http://trackmyshipeng\.site:9094/ app.any.run/tasks/086f767d…
1
9
38
7
4ألف
James_inthe_box's profile picture.
James
 @James_inthe_box
٢ يوليوم

#purecryptor #opendir at: http://198.12.126].164/tst/

James_inthe_box's tweet image. #purecryptor #opendir at: http://198.12.126].164/tst/
0
11
33
1
3ألف
Huntio's profile picture. https://t.co/9I6nRUiFjm is a service that provides threat intelligence data about observed network scanning and cyber attacks.
Hunt.io
@Huntio
١٣ أغسطس ٢٠٢٤ م

#opendir 106.14.176.]208 Is hosting several suspicious ELF files communicating w/ the above IP on port 7744 and frp, likely to proxy traffic. RingQ, an open-source Windows shellcode generator, is also present. A week ago, Vshell was also detected on this IP on port 8082.

Huntio's tweet image. #opendir 106.14.176.]208 Is hosting several suspicious ELF files communicating w/ the above IP on port 7744 and frp, likely to proxy traffic. RingQ, an open-source Windows shellcode generator, is also present. A week ago, Vshell was also detected on this IP on port 8082.
Huntio's tweet image. #opendir 106.14.176.]208 Is hosting several suspicious ELF files communicating w/ the above IP on port 7744 and frp, likely to proxy traffic. RingQ, an open-source Windows shellcode generator, is also present. A week ago, Vshell was also detected on this IP on port 8082.
3
8
33
13
4ألف
James_inthe_box's profile picture.
James
 @James_inthe_box
١٠ يوليو ٢٠٢٤ م

Large #opendir at: http://57.180.253.244 medium confidence msbuild.exe is #ghostrat

James_inthe_box's tweet image. Large #opendir at: http://57.180.253.244 medium confidence msbuild.exe is #ghostrat
2
9
32
7
6ألف

Something went wrong.


Something went wrong.


United States Trends