[Threatview.io ] 🔥 Our latest collection on #virustotal using telemetry gathered through our proactive hunter "Peaking inside an malicious host using #opendir on "37.77.239[.]239"

⚠️ Previously #QakBot & #Redline C2 were hosted on the IP
⚠️#Ransomware
⚠️#Hacktools

https://www.virustotal.com/gui/collection/863097e72a2cfb4e0a5456af5cd3a3baf85d396b8d0ffb33578c4e7fc1e15651

#threatintel
#DFIR

Is your Microsoft 365 tenant being sprayed by opportunistic attackers? Probably!

I took a look at commonly used Microsoft 365 'attack tools' (including #teamfiltration) and techniques and created a resource which might help you spot attacker activity early on.

johncysa.com/microsoft-365-…

#microsoft365 #hacktools

Is your Microsoft 365 tenant being sprayed by opportunistic attackers? Probably!

I took a look at commonly used Microsoft 365 'attack tools' (including #teamfiltration) and techniques and created a resource which might help you spot attacker activity early on.

https://www.johncysa.com/microsoft-365-attack-tool-user-agents

#microsoft365 #hacktools