Andorra
Joined October 2022
In recent days, we've identified targeted campaigns against major organizations . Cybercriminals are using Skype to distribute seemingly harmless PDF documents. However, these files are indeed binary executables that, once opened, install an infostealer.
1
1
1
243
IoCs: MadeForNotebook.dll b93a9dde24f0b00cba1ac19339b05a6cbc05b96dbc19c4582f161e026482e0f4 affiliations revenue.pdf www[.]skype[.]com f968267b47dac3fc377cb570bd2b90a4e7c2addff2605a1bc1c267d89a6d539a sbin.exe cbc5c864e19496a414b157078b05d03408ab4d27f38bb8a6f21e9d6c721ead85
1
116
ny.png d51d1c5290eb1121d4c86c5c4459770aead21660a2cdd85e055575f89141eb37 g2.ocx b242fa75d00ba249b539725f777e2eb58bb435e43b7bc04828efd5f5dc674b26 g1.ocx 5afff2bb2f3824c7c6b0fdaa4ff18dd532b89e5ec70fdf9adb53349c3f08d837 Domain: roodstarslook[.]com
62
Alpine Security presente en C1b3rWall 2023. Visitanos en Zona Docente 3- Stand 30. Os esperamos.
2
2
235
SPECTR3: Remote Acquisition Tool Alpine Security would like to share with the community a new project we have been working on for some time now: github.com/alpine-sec/SPECTR…
2
6
3
629
This makes it quick and easy to perform complete remote volume acquisitions, triages, or analyses with the investigator's favorite tools and scripts on his own workstation without installing anything on the endpoints.
1
158
SPECTR3 aims to facilitate live forensics work by making remote endpoint block devices available to the investigator as if they were a local disk drive.
85
Ready for #mwc23. Visit us at Hall 8.1 Stand 8.1C42.8
1
1
117