Latest posts tagged with #smokeloader on Bluesky
🚨Exposing #LOCKBIT 5.0 Server: IP & DOMAIN
IP: 205.185.116.233 🇺🇸
#AS53667
Domain: karma0[.]xyz
Reg: 2 November 2025
💡LockBit Group uses #Smokeloader in their attacks
MD5: e818a9afd55693d556a47002a7b7ef31
#Lockbit5 #Ransomware #Security #Intelligence #OSINT #Databreach
~Zscaler~
SmokeLoader resurfaces with a new 'v2025' variant, featuring bug fixes and updated evasion techniques following the 'Operation Endgame' takedown.
-
IOCs: (None identified)
-
#Malware #SmokeLoader #ThreatIntel
Campagna MaaS usa Emmenhtal e Amadey per colpire entità ucraine via GitHub. Talos rivela tattiche e IOC per la mitigazione.
#Amadey #CiscoTalos #Emmenhtal #github #MaaS #SmokeLoader #ucraina
www.matricedigitale.it/2025/07/17/o...
In May 2024 Operation Endgame took down multiple malware families. Europol called it the “largest ever operation against botnets, which play a major role in the deployment of ransomware.” brnw.ch/21wSRiX
#IcedID #Bumblebee #SystemBC #Pikabot #SmokeLoader
~Trendmicro~
Agenda ransomware group now uses SmokeLoader and a new stealthy loader, NETXLOADER, increasing data theft risk.
-
IOCs: mxblog77[. ]cfd, bloglake7[. ]cfd, mxbook17[. ]cfd
-
#AgendaRansomware #NETXLOADER #SmokeLoader #ThreatIntel
🚨 Policía detiene a Clientes del Malware Smokeloader y confisca sus Servidores ciberninjas.com/policia-deti...
#Malware #Smokeloader #Ciberseguridad #Cibercriminales #Investigación #Confisca #SeguridadCibernética #Hackers
🚨 #OperationEndgame - With the operators out of the picture, law enforcement is closing in on Smokeloader botnet’s paying customers across Europe and North America.
Read: hackread.com/smokeloader-...
#CyberSecurity #CyberCrime #Smokeloader #Botnet
Europol arresta cinque clienti del botnet Smokeloader: database cifrato rivela identità reali. Operazione Endgame colpisce domanda crime-as-a-service.
#botnet #crimeasaservice #cybercrime #database #europol #forensics #OperazioneEndgame #SmokeLoader
www.matricedigitale.it/sicurezza-in...
Smokeloader isn’t your everyday malware—it morphs into new threats and slips past defenses with ease. How long before cybercrime’s most elusive tool gets permanently shut down?
#smokeloader
#cybersecurity
#botnet
#malware
#cybercrime
💡 CoffeeLoader il malware che evade le difese sfruttando la GPU
gomoot.com/coffeeloader...
#blog #coffeeloader #cybersecurity #gpu #malware #news #picks #ransomware #smokeloader #spuware #stack #tech #tecnologia #zscaler
CoffeeLoader マルウェア ローダーが SmokeLoader オペレーションにリンク
CoffeeLoader Malware Loader Linked to SmokeLoader Operations #InfosecurityMagazine (Mar 27)
#CoffeeLoader #SmokeLoader #マルウェア #サイバーセキュリティ #脅威分析
Attacker compromised email account from mx[.]jurimex[.]ua to deliver phishing email. Email contains malicious URL abuse infrastructure from drive[.]legalaid[.]gov[.]ua, owned by Ukraine's Coordination Centre for Legal Aid Provision that was abused to deliver RAR file contains #SmokeLoader malware.
🚨 Targeted #phishing attacks on Ukrainian 🇺🇦 gov! Emails from moulmg@meta[.]ua & info@betta[.]com[.]ua deliver malicious 7ZIP files exploiting CVE-2025-0411 to drop #SmokeLoader. Notably, the meta[.]ua mail service has been previously abused by #APT28 (GRU) for #cyber operations.
7-Zip MoTW Bypass Exploited in Zero-Day Attacks Against Ukraine: A Comprehensive Analysis
thedefendopsdiaries.com/7-zip-motw-b...
#7zip
#zeroday
#cybersecurity
#ukraine
#motwbypass
#smokeloader
#cve20250411
#cyberattacks
#infosec
攻撃者が S3 バケット ネームスクワッティングを悪用する方法とそれを阻止する方法
How attackers abuse S3 Bucket Namesquatting — And How to Stop Them #BleepingComputer (Feb 5)
#SmokeLoader #7Zip脆弱性 #CVE20250411 #サイバースパイ #ウクライナ攻撃
CVE-2025-0411, a zero-day #vulnerability in 7-Zip is actively exploited by russian adversaries to target Ukraine in a #SmokeLoader campaign involving homoglyph attacks. Detect exploitation attempts using a set of #Sigma rules from SOC Prime Platform.
https://buff.ly/3EmgSht
7-Zip MotW バイパスがウクライナへのゼロデイ攻撃で悪用される
7-Zip MotW bypass exploited in zero-day attacks against Ukraine #BleepingComputer (Feb 4)
#7-Zip脆弱性 #MotW回避 #ゼロデイ攻撃 #SmokeLoader #サイバーセキュリティ
Chart showing malware families using AceCryptor
As for the malware families packed by the cryptor, we could yet again see the usual suspects such as #Rescoms, #Smokeloader, and #Stealc among the most delivered threats. 3/7
SmokeLoader use d'anciens bugs Office pour mieux voler des données
www.lemondeinformatique.fr/actualites/l...
#Infosec #Security #Cybersecurity #CeptBiro #SmokeLoader #Office #VolerDesDonnees
6/ Fortinet warns: "SmokeLoader uses plugins for attacks instead of downloading final-stage files." Analysts must remain cautious—even familiar malware like this can evolve, becoming a bigger threat.
#CyberSecurity #SmokeLoader #Taiwan #AI
🚨 SmokeLoader malware is back, now more advanced and dangerous, with enhanced tools to steal harvast credentials - The malware was spotted targeting industries in #Taiwan 💻🔒
Read: hackread.com/smokeloader-...
#CyberSecurity #SmokeLoader #Malware #Taiwan
Flexible Structure of Zip Archives Exploited to Hide Malware. www.darkreading.com/threat-intel... #Cybersecurity #Malware #Threatintel #Smokeloader
Attackers are targeting financial departments with SmokeLoader malware
www.helpnetsecurity.com/2024/03/22/s...
#Infosec #Security #Cybersecurity #CeptBiro #FinancialDepartments #SmokeLoader #Malware
8Base Group Deploying New #Phobos Ransomware Variant via #SmokeLoader ⚠️
thehackernews.com/2023/11/8bas...
