Defensive CTI in motion

Live feed of what psyc has detected and what it has done about it.

Today 40

1. New medium malware from otx medium

   OTX: Error 524 Decoy: Unmasking a Global Smishing Operation Hiding Behind Error Pages

   23:00 · PSYC-OTX-6a20299f34e4961fdaff1615
   →
2. New medium malware from otx medium

   OTX: PCPJack Hijacked 230 AWS, GCP, and Azure Servers to Run a Hidden SMTP Relay Network

   23:00 · PSYC-OTX-6a2067cbef8cf15f958711ce
   →
3. New medium malware from otx medium

   OTX: Impersonation, Click Hijacking, and TDS: Inside a Malware Distribution Ecosystem

   23:00 · PSYC-OTX-6a20679f5ade869dcb4bf6b5
   →
4. New medium malware from otx medium

   OTX: The Demon Arrives Later: A Havoc Stager Hides Behind Microsoft Defender DLP

   23:00 · PSYC-OTX-6a20a73fc005e1fc15255876
   →
5. New medium malware from otx medium

   OTX: Inside the Cross-Platform Propagation of a New Gafgyt Variant C0XMO

   23:00 · PSYC-OTX-6a20a73f2ecb12c1ffd10df5
   →
6. New medium malware from otx medium

   OTX: Browser Spy-Ons: Threat Actor's Extension Hijack Your AI Conversations

   23:00 · PSYC-OTX-6a20e718f462b45e7fbd0db2
   →
7. New medium malware from otx medium

   OTX: Preinstall to persistence: Inside the npm Miasma credential-stealing campaign

   23:00 · PSYC-OTX-6a214311a2c1a61296efbdc5
   →
8. New medium malware from otx medium

   OTX: Argamal: Malware hidden in hentai games

   23:00 · PSYC-OTX-6a214338125edff8d16ab273
   →
9. New medium malware from otx medium

   OTX: UAT-8302 and its box full of malware

   23:00 · PSYC-OTX-69f9f99c0dc1060430bf089e
   →
10. New medium malware from otx medium

    OTX: CloudZ RAT potentially steals OTP messages using Pheno plugin

    23:00 · PSYC-OTX-69f9f99cd352da334850ef13
    →
11. New medium malware from otx medium

    OTX: ClickFix Deno Abuse to CastleRAT

    23:00 · PSYC-OTX-6a21aa7db4b7cf1351f27cb6
    →
12. New medium malware from otx medium

    OTX: ClickFix Is Now Hiring: From Job Platform Impersonation to Python-Based RAT Delivery

    23:00 · PSYC-OTX-6a2201a331661aba15d362d1
    →
13. New medium malware from otx medium

    OTX: Operation TaxShadow: Multi-Region Tax Phishing & In-Memory Malware Campaign

    23:00 · PSYC-OTX-6a2201a401cb916346d57934
    →
14. New medium malware from otx medium

    OTX: Latest goon squad to use fake helpdesk calls to steal creds

    23:00 · PSYC-OTX-6a2201a2fe176ac0486f58e5
    →
15. New medium malware from otx medium

    OTX: Matryoshka #3/3: Gamaredon's Gammasteel Infostealer

    23:00 · PSYC-OTX-6a21844636a81843ce1af3cc
    →
16. New medium malware from otx medium

    OTX: Operation Silent Rotor: Rust-Based Malware Targets Eurasian Unmanned Aviation Sector Ahead of Moscow Summit

    23:00 · PSYC-OTX-69fb57e600c03f5a6ac63de0
    →
17. New medium malware from otx medium

    OTX: ClickFix campaign uses fake macOS utilities lures to deliver infostealers

    23:00 · PSYC-OTX-69fb97e43f09a3b9ae3a39b9
    →
18. New medium malware from otx medium

    OTX: Threat Brief: Exploitation of PAN-OS Captive Portal Zero-Day for Unauthenticated Remote Code Execution

    23:00 · PSYC-OTX-69fc45baaffc99649cda5385
    →
19. New medium malware from otx medium

    OTX: Operation GriefLure: Dissecting an APT Campaign Targeting Vietnam's Military Telecom & Philippine Healthcare

    23:00 · PSYC-OTX-69fc841d0cbc4c199d708315
    →
20. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned elf sample — cf41e271d28aa826e6e2fd46845754191b40223c8c49223e2ba77c1513a58db2

    23:00 · PSYC-MBAZAAR-cf41e271d28aa826
    →
21. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned elf sample — 9f1c64524e7139b93dea1fa48edb73098fe84ff1a32d93a548a09042c2a03ac7

    23:00 · PSYC-MBAZAAR-9f1c64524e7139b9
    →
22. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned elf sample — 1388fbdd71a44e3726852c002e2abfabc114575d951d7e702db3bd8fbae61a05

    23:00 · PSYC-MBAZAAR-1388fbdd71a44e37
    →
23. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned elf sample — 1fdd1176933a786be5aec4814c143f4a192a32284a015bf3a28d96e6df66a3d9

    23:00 · PSYC-MBAZAAR-1fdd1176933a786b
    →
24. New medium malware from malware-bazaar medium

    MalwareBazaar: Mirai elf sample — xnxnxnxnxnxnxnxnx86_64xnxn

    23:00 · PSYC-MBAZAAR-0a05943725ce56a1
    →
25. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned vbs sample — Document.vbs

    23:00 · PSYC-MBAZAAR-06fedd0f6fd4475f
    →
26. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned bat sample — MONTAJES_ELÉCTRICOS_TER,_S.L_REQ_03060026_(2).bat

    23:00 · PSYC-MBAZAAR-2d4ae91d91a9869f
    →
27. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned rar sample — MONTAJES_ELÉCTRICOS_TER,_S.L_REQ_03060026_(2).rar

    23:00 · PSYC-MBAZAAR-5df1f43eeb9210c5
    →
28. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned rar sample — New_Contract_Document.rar

    23:00 · PSYC-MBAZAAR-6d9f49f65be67fcc
    →
29. New medium malware from malware-bazaar medium

    MalwareBazaar: GuLoader rar sample — New_order.rar

    23:00 · PSYC-MBAZAAR-61bbc3575916717e
    →
30. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned js sample — Order_03827452.js

    23:00 · PSYC-MBAZAAR-b06229a08186c901
    →
31. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned zip sample — Order_03827452.zip

    23:00 · PSYC-MBAZAAR-f5471e2ea7b39395
    →
32. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned js sample — PO#9896640.shtml.js

    23:00 · PSYC-MBAZAAR-e5b2a48b132c2846
    →
33. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned zip sample — PO#9896640.shtml.zip

    23:00 · PSYC-MBAZAAR-009207090d9e1c51
    →
34. New medium malware from malware-bazaar medium

    MalwareBazaar: GuLoader exe sample — price_request.exe

    23:00 · PSYC-MBAZAAR-d8b86b1715fdb7b9
    →
35. New medium malware from malware-bazaar medium

    MalwareBazaar: GuLoader rar sample — price_request.gz.rar

    23:00 · PSYC-MBAZAAR-f216c3639e887010
    →
36. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned js sample — Swift_00023140k$_(1).js

    23:00 · PSYC-MBAZAAR-cb2e24b2b95e5307
    →
37. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned rar sample — Swift_00023140k$.rar

    23:00 · PSYC-MBAZAAR-aae58fb492353c35
    →
38. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned rar sample — UrgentXRequestXforXQuote-73654323456787652345678-pdf.txz

    23:00 · PSYC-MBAZAAR-007c16460b4b540c
    →
39. New medium malware from malware-bazaar medium

    MalwareBazaar: PhantomStealer rar sample — CONTRACTXPLAN.rar

    23:00 · PSYC-MBAZAAR-00b7bb0d24e66cd7
    →
40. New medium malware from malware-bazaar medium

    MalwareBazaar: unsigned rar sample — Request_for_Quote_Conversion_to_USD_and_Price_Validation__November_Quote_Attached_pdf.txz

    23:00 · PSYC-MBAZAAR-03a7b15f92c80353
    →