C2-Tracker

C2 Tracker C2 Tracker 是一个免费使用、社区驱动的 IOC 情报源，利用 Shodan 和Censys 搜索来收集已知恶意软件/僵尸网络/C2 基础设施的 IP 地址。 此项目已归档 此项目已归档。data/ 中的文本文件已被移除，不再更新。tracker.py 中的签名也不再更新。 此项目仍可在本地运行，请参阅下方。 致谢 许多查询来源于其他 CTI 研究人员： BushidoToken Michael Koczwara ViriBack Gi7W0rm Glacius corumir salmanvsf SecurityJosh 向他们致以崇高的敬意！ 感谢...

ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure

Cybersecurity researchers have detailed the inner workings of an Android banking trojan called ERMAC 3.0, uncovering serious shortcomings in the operators' infrastructure. "The newly uncovered version 3.0 reveals a significant evolution of the malware, expanding its form injection and data theft...

CISA and FBI Warn Fast Flux is Powering Resilient Malware, C2, and Phishing Networks

Cybersecurity agencies from Australia, Canada, New Zealand, and the United States have published a joint advisory about the risks associated with a technique called fast flux that has been adopted by threat actors to obscure a command-and-control C2 channel. "'Fast flux' is a technique used to...

When coin miners evolve, Part 1: Exposing LemonDuck and LemonCat, modern mining malware infrastructure

Note: In this two-part blog series, we expose a modern malware infrastructure and provide guidance for protecting against the wide range of threats it enables. Part 1 covers the evolution of the threat, how it spreads, and how it impacts organizations. Part 2 is a deep dive on the attacker behavi...

Necurs Botnet in Crosshairs of Global Takedown Offensive

A New York State court issued an order this week giving Microsoft control of the U.S.-based infrastructure used by the notorious Necurs botnet in an effort to stop the world’s most prolific and globally dispersed spam and malware infrastructure. The move came after Microsoft and partners across 3...