Month: December 2024


  • DroidBot: Insights from a new Turkish MaaS fraud operation

    DroidBot is an advanced Android Remote Access Trojan combining hidden VNC and overlay capabilities with spyware features. It uses dual-channel…


  • Cobalt Strike Beacon Detected – 38[.]147[.]171[.]174:443

    * [Cobalt Strike](https://www.redpacketsecurity.com/category/cobalt-strike/)Cobalt Strike Beacon Detected — 38-[.-]147-[.-]171-[.-]174:443===============================================================[December 8, 2024](https://www.redpacketsecurity.com/2024/12/) Cobalt Strike Beacon Detection Alerts > The Information provided at…


  • Cobalt Strike Beacon Detected – 1[.]94[.]6[.]24:6666

    * [Cobalt Strike](https://www.redpacketsecurity.com/category/cobalt-strike/)Cobalt Strike Beacon Detected — 1-[.-]94-[.-]6-[.-]24:6666===========================================================[December 8, 2024](https://www.redpacketsecurity.com/2024/12/) Cobalt Strike Beacon Detection Alerts > The Information provided at…


  • Cobalt Strike Beacon Detected – 64[.]23[.]245[.]177:443

    * [Cobalt Strike](https://www.redpacketsecurity.com/category/cobalt-strike/)Cobalt Strike Beacon Detected — 64-[.-]23-[.-]245-[.-]177:443==============================================================[December 8, 2024](https://www.redpacketsecurity.com/2024/12/) Cobalt Strike Beacon Detection Alerts > The Information provided at…


  • Cobalt Strike Beacon Detected – 54[.]196[.]15[.]38:443

    * [Cobalt Strike](https://www.redpacketsecurity.com/category/cobalt-strike/)Cobalt Strike Beacon Detected — 54-[.-]196-[.-]15-[.-]38:443=============================================================[December 8, 2024](https://www.redpacketsecurity.com/2024/12/) Cobalt Strike Beacon Detection Alerts > The Information provided at…


  • Cobalt Strike Beacon Detected – 64[.]225[.]106[.]114:80

    * [Cobalt Strike](https://www.redpacketsecurity.com/category/cobalt-strike/)Cobalt Strike Beacon Detected — 64-[.-]225-[.-]106-[.-]114:80==============================================================[December 8, 2024](https://www.redpacketsecurity.com/2024/12/) Cobalt Strike Beacon Detection Alerts > The Information provided at…


  • Cobalt Strike Beacon Detected – 34[.]226[.]46[.]150:8443

    * [Cobalt Strike](https://www.redpacketsecurity.com/category/cobalt-strike/)Cobalt Strike Beacon Detected — 34-[.-]226-[.-]46-[.-]150:8443===============================================================[December 8, 2024](https://www.redpacketsecurity.com/2024/12/) Cobalt Strike Beacon Detection Alerts > The Information provided at…


  • [FUNKSEC] – Ransomware Victim: spdyn[.]de technology

    * [Data Breach](https://www.redpacketsecurity.com/category/databreach/)* [Ransomware](https://www.redpacketsecurity.com/category/ransomware/)-[FUNKSEC-] — Ransomware Victim: spdyn-[.-]de technology=========================================================[December 8, 2024](https://www.redpacketsecurity.com/2024/12/) ![image](https://www.redpacketsecurity.com/wp-content/uploads/2024/09/image.png ‘[FUNKSEC] – Ransomware Victim: spdyn[.]de technology 1’)Ransomware Group:…


  • [SARCOMA] – Ransomware Victim: Gulf Petrochemical Services & Trading

    * [Data Breach](https://www.redpacketsecurity.com/category/databreach/)* [Ransomware](https://www.redpacketsecurity.com/category/ransomware/)-[SARCOMA-] — Ransomware Victim: Gulf Petrochemical Services -& Trading========================================================================[December 8, 2024](https://www.redpacketsecurity.com/2024/12/) ![image](https://www.redpacketsecurity.com/wp-content/uploads/2024/09/image.png ‘[SARCOMA] – Ransomware Victim: Gulf…


  • [FUNKSEC] – Ransomware Victim: ncfe[.]org[.]in

    * [Data Breach](https://www.redpacketsecurity.com/category/databreach/)* [Ransomware](https://www.redpacketsecurity.com/category/ransomware/)-[FUNKSEC-] — Ransomware Victim: ncfe-[.-]org-[.-]in=====================================================[December 8, 2024](https://www.redpacketsecurity.com/2024/12/) ![image](https://www.redpacketsecurity.com/wp-content/uploads/2024/09/image.png ‘[FUNKSEC] – Ransomware Victim: ncfe[.]org[.]in 1’)Ransomware Group: **FUNKSEC**=============================### VICTIM…