Logo
Picture

MalCrawler @MalCrawler

MalCrawler hunts and destroys malware targeting ICS/SCADA devices. Protecting Critical infrastructure like the power grid, oil & gas facilities..... malcrawler.com Washington DC Joined February 2012
  • Tweets
    201
  • Followers
    2K
  • Following
    67
  • Likes
    8
MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

@NANOantivirus was the only AV vendor initially that detected #Gamaredon malicious documents #APT #Malware. Great detection ability by Nano AV! malcrawler.com/russias-gamare…

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

Gamaredon 2nd stage C2 (2.59.41.5) is referencing other targets/victims - United Nations High Commissioner for Refugees and National Security and Defense Council of Ukraine. unhcr.ddns.net rnbo-ua.ddns.net #Gamaredon #Malware #APT #Russia malcrawler.com/russias-gamare…

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

Russia's Gamaredon group is leveraging cybersecurity themed lure for its latest campaign against Ukraine. #Gamaredon #APT #malware Learn More by checking out the link below! malcrawler.com/russias-gamare…

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

Awesome Spear Phish Techniques from those Tricky Tricksters from TrickBot + New IOCs #trickbot #malware malcrawler.com/awesome-spear-…

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

NINJA ICS/SCADA hacking skills! For the ICS #SCADA cybersecurity community, keep an eye on your twitter by following @Cs3Sthlm and this tag #CS3sthlm one of the world's premier ICS Cybersecurity conference taking place in #Sweden.

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

76 percent of US businesses have experienced a cyberattack in the past year | ZDNet zdnet.com/article/76-per…

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

@SchneiderElec has released multiple Security Notifications for Modicon Controllers #scada. Great example of a proactive ICS vendor keeping their customers up2date! schneider-electric.com/en/work/suppor…

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

#APT #Malware Turla Light Neuron malware that targets Microsoft Exchange servers made a few appearances in the past few days (August 2019). Check out our Yara rules for #Turla’s Light Neuron, and feel free to modify and of course Happy Hunting! malcrawler.com/turla-light-ne…

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

#APT #Malware Russian doc using Korean related lure doc translates to: "On the situation on the Korean Peninsula and the prospects for dialogue between the United States and the DPRK.doc” C2: handicap.eu5[.]org ftpupload[.]net Hash: 660a640e702606341ab0d42724380322

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

#APT #Malware using India's 'National Defence College' invitation lure to drop malware on victims NDC_Invitition.xls 08a8db28207fa13ebb25cf0064d12f17 C2: 212.32.226.244

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

#APT #Malware #Turla Microsoft Exchange campaign targetting Egyptian goverment. Check out our Yara rule on the link below. Happy Hunting! afcf3936639b706221d5f67afa75d80b malcrawler.com/turla-group-ha…

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

#APT #Malware themed lure from #Turkey 'Thret Intel report.doc' Malicious doc executes PowerShell and points to a private IP address. The document contains info on #Iran APT group in #Turkish Language with a link to Dell Secureworks Report. 05bfb0296c2197093605d83e96a73413

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

#APT (maybe) #Malware using “Government of #Pakistan” lure. Uses ‘bitsadmin.exe’ to connect to C2 fda.gov.pk (strange!!). Not PowerShell, but clever enough to use native windows tool to download 2nd stage. 405621c931e629d55fe87c8f8e7fc929

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

Chinese #APT #Malware targeting Mongolian military with lure "List of Telephone numbers to be used in the 8th Military Team.doc" (translated) #Mongolia #China 853136f00e87a1ab3e2fc3acb309573e

MalCrawler retweeted
brianbpark Profile Picture

Brian Park @brianbpark

7 years ago

Wanna get behind the scenes of SparkLabs DC/Startup Grind DC? Add me bit.ly/22Pe7Ls #dctech #chatsnap

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

#APT #malware apparently targetting #Pakistan military personnel with CVE-2015-1641 document. Malware interesting enough reaches out to a university in Pakistan psttc.edu[.]pk 8b7d1680d8aeb1d0d822ee33777671ab

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

Parliament Crew #APT #Malware targeting #Qatar Ministry of Foreign Affairs and other Middle Eastern Government. The same group targeted parliaments of #Iraq, #Jordan, #Lebanon in the past year. 48e82912b0769bd3ab3f1d406bc1c5cc malcrawler.com/parliament-cre…

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

Parliament Crew #Malware targeting #Qatar Ministry of Foreign Affairs and other Middle Eastern Government another Cyber Espionage campaign in the region! @MofaQatar_EN @AJENews @ajarabic malcrawler.com/parliament-cre…

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

Did #PakistanStrikesBack both by Jets and Cyber? New #APT #Malware using Indian missile strikes in Kashmir lure targets India’s militrary. #IndiaStrikesPakistan #Pakistan malcrawler.com/did-pakistanst… 41b70737fa8dda75d5e95c82699c2e9b

MalCrawler Profile Picture

MalCrawler @MalCrawler

7 years ago

Tibet Themed Malware and the Treasures of the Rabbit Hole - Same C2 was hosting gmail related domain with #Taiwan .tw suffix #tibet #china #apt #malware 0f74d8a880c638a05ba959c0d5b2fec6 malcrawler.com/tibet-themed-m…

Trends for United States

#holoSerendipity
Mason
#250YearsStrong
SPLC
#DENTISTEXPERTHSANTA
PERTHSANTA FRESH BREATH
Paraguay
Patriot Front
Mighty England
Brandon Jones
#Toonami
Tropical
Wild Berry
Fireworks
Antifa
Mbappe
#MyAdventuresWithSuperman
Feds
5th of July
Hololive

You might like

Hustlin’ in Cyber Threat Intelligence | Tweets are my own | Keybase: @seongsupark | Mastodon: @spark@infosec.exchange
Seongsu Park
@unpacker
12K Followers
@LabsSentinel Research Lead, Hunting nation-state threats @SentinelOne, bending intelligence tech to shape real-world outcomes with @ValidinLLC
Tom Hegel
@TomHegel
7K Followers
Threat intelligence company
ClearSky Cyber Securi...
@ClearskySec
10K Followers
We are the Cyber Threat Intelligence division of NSHC Threat Research Lab. We track Threat Actor Groups activities worldwide and aim to release our findings.
ThreatRecon
@nshcthreatrecon
5K Followers
Managed Compromise Assessments #YARA #IOCs #DFIR #APT #Sigma - the home of @thor_scanner, ASGARD and the Aurora Agent
Nextron Systems
@nextronsystems
9K Followers
Since. 2001. 8. 8 We have been fighting against North Korean cyber operatives since August 8, 2001.
CyberWar - 싸워
@cyberwar_15
7K Followers
Malware researcher at ESET Slovakia. Opinions are my own.
Anton Cherepanov
@cherepanov74
4K Followers
malware researcher, reverse engineer, blogger, conference speaker, programmer, IT security professional
JaromirHorejsi
@JaromirHorejsi
4K Followers
CTO @Volexity. Malware Analyst's Cookbook. Art of Memory Forensics. The @Volatility Project. Thoughts are those of my employer, not mine, they made me say it.
Michael Ligh (MHL)
@iMHLv2
10K Followers
Software Engineer at https://t.co/hCtkCkTR4I
Victor M. Alvarez
@plusvic
4K Followers
Author of oletools, olefile, ViperMonkey, ExeFilter, Balbuzard. #DFIR, #malware analysis, maldocs, file formats, #Python. @decalage@mastodon.social
Philippe Lagadec
@decalage2
5K Followers
Threat hunting & detection writing
Yogesh Londhe
@suyog41
4K Followers
@Shadowserver
Piotr Kijewski
@piotrkijewski
2K Followers