New phishing campaign delivers Agent Tesla via multi-stage, in-memory attack chain, evading detection. Stay vigilant! #CyberSecurity #Phishing #AgentTesla #Malware Link: thedailytechfeed.com/sophisticate...
1
0
0
0
#AgentTesla
Latest posts tagged with #AgentTesla on Bluesky
Trending
Posts tagged #AgentTesla
Screenshot of my blog post with the files and information from this infection.
Screenshot of the email with an attached RAR archive.
The malware, extracted from the attached RAR archive.
Traffic from the infection filtered in Wireshark.
2026-02-03 (Tuesday): #GuLoader for #AgentTesla style malware with FTP data exfiltration. A #pcap of the infection traffic, associated files, and a list of indicators are available at www.malware-traffic-analysis.net/2026/02/03/i...
4
2
0
0
Building a Unified Front Against Infostealers with Threat Intelligence TL;DR / Fast Answer Combatting the surge of infostealers and human-operated ransomware requires more than isolated security t...
#Threat #Intelligence #AgentTesla #cti #infostealers #threat […]
[Original post on vmray.com]
0
0
0
0
5/5 Monitor for powershell.exe with a command line containing select -Skip targeting .srt files. That’s a 100% indicator of this campaign.
#CyberSecurity #AgentTesla #BlueTeam #Malware #Torrent #SOC #Infosec2025
0
0
0
0
ESET researchers have observed BlackHawk being used in spearphishing campaigns to deliver #AgentTesla, targeting hundreds of endpoints in Romanian small and medium-sized companies. 5/9
0
0
1
0
⚠️Οι απατεώνες εκμεταλλεύονται τη δημοτικότητα της τελευταίας ταινίας του Λεονάρντο Ντι Κάπριο για να προσπαθήσουν να μολύνουν ανυποψίαστους χρήστες PC με κακόβουλο λογισμικό. #OneBattleAfterAnother #AgentTesla
0
0
0
0
Cybercriminals exploit fake Leonardo DiCaprio movie torrents to spread Agent Tesla malware. Stay vigilant and avoid downloading from unverified sources. #CyberSecurity #MalwareAlert #AgentTesla Link: thedailytechfeed.com/cybercrimina...
0
0
0
0
📬 „One Battle After Another”: Torrent versteckt Malware in Untertiteln
#Cyberangriffe #ITSicherheit #Warez #AgentTesla #BeniciodelToro #Bitdefender #LeonardoDiCaprio #OneBattleAfterAnother #SeanPenn
0
0
0
0
Watch out as fake torrent for DiCaprio’s “One Battle After Another” is spreading Agent Tesla malware through malicious subtitles and hidden scripts.
Read: hackread.com/dicaprio-one...
#Cybersecurity #AgentTesla #Malware #Windows #OneBattleAfterAnother
2
1
0
1
La CERT-AgID riassume le campagne malevole in Italia dal 25 al 31 ottobre 2025, con malware infostealer e phishing istituzionali in aumento.
#AgentTesla #CERTAgID #Formbook
www.matricedigitale.it/2025/10/31/c...
1
0
0
0
CERT-AGID segnala 25 phishing, 6 malware e 3 vulnerabilità dal 13 al 19 settembre, con focus su Poste, Agenzia Entrate e infostealer.
#AgentTesla #CERTAgID #malware #phishing
www.matricedigitale.it/2025/09/20/c...
0
0
0
0
Malware Analysis Chronicles: Unpacking AgentTesla Introduction Continue reading on System Weakness »
#tesla #malware #agenttesla #malware-analysis #reverse-engineering
Origin | Interest | Match
0
0
0
0
After years of dominance in #ESET’s top #infostealer statistics, the era of #AgentTesla has come to an end. It finished H1 2025 in fourth place, its numbers having decreased by 57%. The reason? It is no longer under active development. 1/4
6
6
1
0
2025年4月の世界のサイバー脅威、FakeUpdatesがトップとなる状況を解析 #FakeUpdates #Remcos #AgentTesla
2025年4月の脅威インデックスを発表しました。FakeUpdatesが上位を占め、サイバー攻撃の複雑化が進む中、効果的な防御戦略が求められています。
0
0
0
0
Tesla Users Targeted by Dangerous New Malware: What You Should Know #AgentTesla #Email #FinancialData
0
0
0
0
Multi-Stage Malware Attack Uses .JSE and PowerShell to Deploy Agent Tesla and XLoader reconbee.com/multi-stage-...
#multistagemalware #malwareattack #JSE #PowerShell #agenttesla #XLoader #CyberSecurity #cyberattacks
1
0
0
0
2025-02-12 (Wed): #VIP_Recovery (an #AgentTesla variant) from Brazil #malspam --> zip attachment --> extracted EXE.
File name: Factura Gastos.exe
Email accounts for data exfiltration: antonipont@grupobdb[.]com --> cludsewe3@gmail[.]com
EXE available at: bazaar.abuse.ch/sample/c7620...
4
0
0
0
Screenshot of the email and the associated malware as an attached file.
Traffic from the infection filtered in Wireshark.
2025-02-07 (Friday): Today's boring example of #malpsam pushing #GuLoader for #AgentTesla style malware. EXE of this malware available at bazaar.abuse.ch/sample/833aa...
3
1
0
0
2025-01-09 (Thursday): #CVE-2017-0199 #XLS --> #HTA --> #VBS --> #steganography --> #DBatLoader or #GuiLoader style malware for #AgentTesla. Data exfil over FTP. A #pcap from an infection, the associated malware, and more info available at www.malware-traffic-analysis.net/2025/01/09/i...
5
0
1
0
2025-01-09 (Thursday): Now this is more like it! Real #malspam with real #malware. Even if the infection traffic looks like it's an #Matiex or #SnakeLogger or #AgentTesla variant that exfiltrates data through api.telegram[.]org.
#AnyRun analysis of the malware EXE at: app.any.run/tasks/8ffd01...
3
1
0
0
0
1
0
0
Screenshot of the email showing a TAR archive as an email attachment.
The TAR archive and its content, a Windows EXE file for AgentTesla
An update to the Windows registry showing the malware persistent on an infected Windows host.
Traffic from an infection filtered in Wireshark to show the FTP data exfiltration traffic.
2024-12-04 (Wednesday): #AgentTesla variant using #FTP for data exfiltration. A sanitized copy of the email distributing the malware, a #pcap from an infection run, the associated malware samples, and a list of indicators are available at www.malware-traffic-analysis.net/2024/12/04/i...
6
4
1
0
2024-11-25 (Monday): My thanks to the criminals who email malware directly to my inbox. This one is #AgentTesla using #FTP for #data_exfiltration. Sends to FTP server approx every 10 minutes.
Attached disk image file: bazaar.abuse.ch/sample/7a11d...
Extracted EXE: bazaar.abuse.ch/sample/2362b...
7
3
1
0
Spanish speakers beware! A new campaign using the Agent Tesla RAT targets Spanish-speaking individuals.
hackread.com/phishing-cam...
#CyberSecurity #AgentTesla #Malware
2
2
0
0
Online Travelers at Risk: Agent Tesla Malware Attacks Travel Industry
www.forcepoint.com/blog/x-labs/...
#Infosec #Security #Cybersecurity #CeptBiro #OnlineTravelers #Risk #AgentTesla #MalwareAttacks #TravelIndustry
0
0
0
0
#AgentTesla (dropped by #GuLoader .vbs file [1]) is using the PowerShell framework Pester [2] to enumerate the victim host and evade detections. It's also running the BitsTransfer PowerShell module in a loop to download further stages from Google Drive [3] (Viru.aaf .... subtle 😂).
0
0
1
0