Anonymous :anarchism: 🏴 · @YourAnonRiots
6060 followers · 37835 posts · Server mstdn.social
Scripter ☑️ · @scripter
111 followers · 437 posts · Server social.tchncs.de
Anonymous :verified_neko:🏴 · @YourAnonRiots
4890 followers · 28598 posts · Server mstdn.social
Anonymous :verified_neko:🏴 · @YourAnonRiots
4972 followers · 28930 posts · Server mstdn.social
5OUTH W35T OHIO ANONS · @LinuxRoot
27 followers · 222 posts · Server kolektiva.social

Y'all remember @larry has been working on? the cryptomining botnet that landed on one of our honeypots earlier this year?

Part three is live now, this time discussing attack traffic. The highlights:

🟠 we believe it's DDoS for hire
🔵 victims are mostly in Asia, North America, and Europe
🟠there's an interesting lack of activity in Russia and surrounding territories possibly pointing to the origins
🔵 two notable targets for FiveM and RedM, (gaming mods for GTA V and RDR2) which can tell us a lot about who its customers are.

akamai.com/blog/security-resea

#kmsdbot #research #security #infosec #cybersec #botnets #cryptominers

Last updated 2 years ago

Eric MARLIERE · @ouaibs
18 followers · 27 posts · Server mastodon.top

KmsdBot est un programme malveillant d'attaque et de minage.
Après une seule commande mal formatée, le bot s’est arrêté de transmettre des messages.
"Ce n’est pas tous les jours que l’on tombe sur un botnet que ses propres auteurs ont réussi à faire planter”, ironise Larry W. Cashdollar, chercheur chez Akamai.
lnkd.in/dx_-qRy5

#botnet #cybercriminalite #kmsdbot

Last updated 2 years ago

Ben Tasker · @ben
239 followers · 465 posts · Server mastodon.bentasker.co.uk

I can't seem to stop re-reading this, it's just too good.

Botnet author failed to trap exceptions, then made a typo in commands sent from their C2, crashing their non-persistent bot daemon and so taking down their own

Pure gold...

theregister.com/2022/12/06/bot

#botnet #infosec #kmsdbot

Last updated 2 years ago

Marcel SIneM(S)US ☑️ · @simsus
85 followers · 736 posts · Server social.tchncs.de

Welche Auswirkungen ein fehlendes Leerzeichen haben kann. Kenne es aber auch umgekehrt: Ein Zeichen mehr in der Import TXT Datei und schon funktioniert eine Schnittstelle nicht mehr.

l+f: Sicherheitsforscher legen aus Versehen gesamtes lahm | heise online heise.de/news/l-f-Sicherheitsf

#cryptocurrency #cryptocurrencies #bitcoin #kmsdbot #botnet

Last updated 2 years ago

Vidmo :donor: :mastodon: · @VidmoOreda
526 followers · 1325 posts · Server infosec.exchange

RIP . Apparently didn’t lang very well lololol. If you gonna , learn to type FFS.

#kmsdbot #golang #malicious

Last updated 2 years ago

Vidmo :donor: :mastodon: · @VidmoOreda
526 followers · 1325 posts · Server infosec.exchange

RIP . Apparently Golang didn’t lang very well lololol

#kmsdbot

Last updated 2 years ago

heise online · @heiseonline
27637 followers · 542 posts · Server mastodon.social
DarkOperator 🚀 · @DarkOperator
963 followers · 720 posts · Server infosec.exchange
Gioyosemite · @gioyosemite
3 followers · 151 posts · Server mastodon.uno
Pierluigi Paganini · @Pierluigi_Paganini
34 followers · 56 posts · Server mstdn.social

Researchers have discovered new "" leveraging weak SSH credentials to compromise systems with the goal of mining and conducting targeted attacks.

thehackernews.com/2022/11/new-

#Hacking #CyberSecurity #InfoSec #DDoS #Cryptocurrency #Malware #kmsdbot

Last updated 2 years ago

Pierluigi Paganini · @Pierluigi_Paganini
34 followers · 56 posts · Server mstdn.social

New geared toward targets: - akamai.com/blog/security-resea

Here's the cool thing: If you are using github.com/chainguard-dev/osqu - you can already detect an attack without any updates. At a minimum, the following alerts should fire:

- unexpected-dev-entries
- unexpected-dev-executables
- unexpected-exec-dir
- sketchy-fetchers
- unexpected-executable-permissions
- unexpected-talkers

#blueteam #dfir #kmsdbot #embedded #malware #linux

Last updated 2 years ago

DarkOperator 🚀 · @DarkOperator
512 followers · 224 posts · Server infosec.exchange