What in the AdapatixC2 this is ? ;)

#365Stealer #Panel http[://51.210.1.239[:8443/365-Stealer/yourVictims/login[.php Mikhail Kasimov Dee

🚩 Website impersonating AnyDesk on anydeske[.]icu, downloads a .NET loader which then launches a stealer, both unknown to me 🤔 Nexts stages: - https://pastebin[.]com/raw/YwvHhwUk - https://pastebin[.]com/raw/WrgrtxSu - http://45.145.7[.]134/hook/upgrade.php -

+ Panel: http://45.145.7[.]134/login.php Dee

C2 panel of Mave Stealer https[://web.]maveproj3ct[.lol/ #MAVESTEALER #PANEL #CTI #STEALER Who said what? Mikhail Kasimov Dee

I found a what I think novel approach which allowed me to list some of the content of #Lumma #Infostealer Command & Control servers with the help of left behind .DS_Store files. Blog, tool and Lumma files can be found here nexusfuzzy.medium.com/lumma-stealer-…

🔍We looked at the C2 server associated with the #Flodrix #botnet and used an internet-exposed RPC service to uncover a world-readable NFS mount and 745 compromised hosts! 👀 hubs.ly/Q03sTqVc0 #CVE20253248 #Malware #InfoSec #Cybersecurity #CyberAttack #exploit

new BOFAMET Panel 217[.144.189.8[:8000 Mikhail Kasimov Dee #CTI

AIRAVAT RAT web panel url : https://rat.riyajchowdhury[.]xyz/ Not detected on VirusTotal more AIRAVAT RAT web panels detected by #C2Watcher on github.com/Xanderux/C2wat…

66[.78.40.36 #StealeCRM Mikhail Kasimov Dee #CTI #Stealer

#Matanbuchus 3.0 C2 Panel ? #malware 5.252.155[.81/auth/login/ 193.105.134[.245/auth/login/ 179.60.149[.213/auth/login/ 185.39.19[.164/auth/login/

Cyber Stealer Panel - synproxy[.live Mikhail Kasimov Dee #CTI #Panel #stealer

#Opendir 🇧🇷 Relacionado a investigación de Padawan Expone: - Credenciales - user+pass(cifrada) - Sites - Headers / Tokens de sesión + 12000 jsons + 1800 txt Dee Panels: hxxps://servidor2025.com/control/admin2/ hxxps://servidor2025.com/gpt.php

Odyssey Stealer C2 Panel http[://185.93.89[.63/login http[://sdojifsfiudgigfiv[.to/login #Threathunting #Odyssey #Stealer #ThreatIntel #Panel MalwareHunterTeam Dee Who said what? RussianPanda 🐼 🇺🇦 Mikhail Kasimov

SalatStealer (aka WEB_RAT) is on the rise 📈, heavily dropped by Amadey 📥 Malware sample: 📄bazaar.abuse.ch/sample/8b94f5f… Admin Panel: 📡https://salat .cn/login/ (Cloudflare 🇺🇸) Gihub repository ➡️"importantfiles": 🗜️github.com/webr-at/import…

#malware #TinyLoader C2 Panel 176.46.152[.]46/zyxic/login.php See: app.any.run/tasks/e2dbfe51… cc: ET Labs

ANY.RUN Dee 3 SIDs into #ETOpen, thanks Dee ! 2063946 - ET MALWARE Win32/TinyLoader CnC Activity (POST) 2063947 - ET MALWARE TinyLoader CnC Response M1 2063948 - ET MALWARE TinyLoader CnC Response M2