TelegramRAT

TelegramRAT root@kitploit: 플랫폼 독립적인 텔레그램 기반 RAT으로, 텔레그램을 통해 통신하여 네트워크 제한을 우회합니다. 참고: root@kitploit: 새로운 플랫폼 독립적 RAT 사용: https://github.com/machine1337/pyFUD 설치: root@kitploit: 1. git clone https://github.com/machine1337/TelegramRAT.git 2. 이제 '사용 방법' 섹션의 지침을 따르십시오. 데모:...

smtpshell

smtpshell Gmail SMTP 또는 다른 SMTP를 통해 통신하여 네트워크 제한을 우회하는 간단한 리버스 셸 참고: root@kitploit: 이 리버스 셸은 Gmail SMTP를 통해 통신합니다 또는 다른 SMTP도 사용 가능. 하지만 Gmail SMTP가 유효한 이유는 대부분의 회사에서 알 수 없는 트래픽을 차단하기 때문에 Gmail 트래픽은 유효하며 모든 곳에서 허용됩니다. 경고: root@kitploit: 1. VirusTotal.com에 페이로드를 업로드하지 마십시오. 이 도구는 시간이 지나면 작동하지 않습니다...

Venom

Venom Venom は、通信のための代替手段を提供することを目的とした C++ ライブラリです。プロセスに辿り着ける可能性のあるソケットを作成する代わりに、新しい「隠れた」ウィンドウが表示されない 分離された Edge プロセスを作成しEdge は Windows 10 以降に標準インストールされており、疑わしく思われないブラウザであるため選択されました、そのソケットの1つを奪ってネットワーク操作を実行します。...

PureCrypter Deploys Agent Tesla and New TorNet Backdoor in Ongoing Cyberattacks

A financially motivated threat actor has been linked to an ongoing phishing email campaign that has been ongoing since at least July 2024 specifically targeting users in Poland and Germany. The attacks have led to the deployment of various payloads, such as Agent Tesla, Snake Keylogger, and a...

GuLoader returns with a rotten shipment

GuLoader, a perennial favourite of email-based malware campaigns since 2019, has been seen in the wild once again. GuLoader is a downloader with a chequered history, dating back to somewhere around 2011 in various forms. Two years ago it was one of our most seen malspam attachments. Most popular...

ScarCruft continues to evolve, introduces Bluetooth harvester

Executive summary After publishing our initial series of blogposts back in 2016, we have continued to track the ScarCruft threat actor. ScarCruft is a Korean-speaking and allegedly state-sponsored threat actor that usually targets organizations and companies with links to the Korean peninsula. Th...

Researchers Discovery Data-Stealing Malware That Likes to Nap

Researchers at FireEye’s Malware Intelligence Lab say they’ve found malware that attempts to evade detection with extended sleep calls and uses “the fast flux technique” to hide the attacker’s identity. They are calling the malicious downloader “Trojan Nap” and notes it uses a technique akin to t...