Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

#AhnLab #ASEC AhnLab ASEC ahnlab.com South Korea Joined June 2020
  • Tweets
    113
  • Followers
    357
  • Following
    27
  • Likes
    0
AhnLab Security Emergency Response Center (ASEC) retweeted
780thC Profile Picture

780th Military Intelligence Brigade (Cyber) @780thC

2 years ago

Kimsuky Group Using Meterpreter to Attack Web Servers | ASEC has recently discovered the distribution of malware targeting web servers by Kimsuky group; a threat group deemed supported by North Korea. asec.ahnlab.com/en/53046/ @AhnLab_ASEC

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

2 years ago

#Trigona #Ransomware Attacking MS-SQL Servers. Typical attacks that target MS-SQL servers include brute force attacks and dictionary attacks on systems where account credentials are poorly managed. asec.ahnlab.com/en/51343/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

2 years ago

#Kimsuky Uses Alternate Data Stream (ADS) to Conceal Malware. asec.ahnlab.com/en/50625/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

2 years ago

#AhnLab #MDS detects and blocks malicious #IcedID ms-office word file that uses anti-sandbox techniques. asec.ahnlab.com/en/50198/ 👍AhnLab MDS global.ahnlab.com/site/product/p…

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

2 years ago

#Nevada #Ransomware is being distributed. b673d92b77489d12779dc1fb5e8f6fdd ".NEVADA" extension 1. Main Features of Nevada Ransomware 2. Nevada Encryption Targets and Exception Conditions asec.ahnlab.com/en/50063/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

2 years ago

ASEC has recently discovered the #ShellBot, also known as #PerlBot, malware being installed on poorly managed Linux SSH servers. If ShellBot is installed, Linux servers can be used as DDoS Bots for DDoS attacks against specific targets. asec.ahnlab.com/en/49769/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

2 years ago

ASEC discovered a malware strain disguised as a password file and being distributed alongside a normal file within a compressed file. The recently discovered malware was in #CHM and #LNK file formats. asec.ahnlab.com/en/49760/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

2 years ago

📝AhnLab Threat Intelligence Report A comprehensive report on monitoring the activities of Kimsuky (FlowerPower, AppleSeed) in 2022 asec.ahnlab.com/wp-content/upl… asec.ahnlab.com/en/49520/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

2 years ago

📝AhnLab Threat Intelligence Report Unique characteristics of Kimsuky group’s spear phishing emails. Kimsuky used FQDN disguised as a famous Korean web portal. asec.ahnlab.com/wp-content/upl… asec.ahnlab.com/en/49507/ #AhnLab #Kimsuky #Anlaysis #Thallium

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

2 years ago

📝AhnLab Threat Intelligence Report Threat Trend Report on Region-Specific Ransomware - Localized Ransomware Attacks - Case Study: South Korea, Taiwan, China, Chile asec.ahnlab.com/wp-content/upl… asec.ahnlab.com/en/49515/ #AhnLab #Ransomware #Anlaysis

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

2 years ago

#Mallox #ransomware, which targets vulnerable MS-SQL servers, has been historically distributed at a consistently high rate. Mallox disguised as a program related to DirectPlay is a file built in .NET file. 📝Analysis: asec.ahnlab.com/en/49366/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

2 years ago

AhnLab Security Emergency response Center (ASEC) has recently discovered #CHM malware which is assumed to have been created by #Kimsuky. It is distributed as an email attachment. IOC: 726af41024d06df195784ae88f2849e4 C2: hxxp://mpevalr.ria[.]monster asec.ahnlab.com/en/49295/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

2 years ago

❗MS-SQL Attack The attacker used not only #CobaltStrike but also #Netcat to gain control over the infected system. It targets poorly managed MS-SQL servers. Various other malware were also installed like privilege escalator, infostealer, and proxy tools. asec.ahnlab.com/en/49249/

AhnLab Security Emergency Response Center (ASEC) retweeted
780thC Profile Picture

780th Military Intelligence Brigade (Cyber) @780thC

3 years ago

According to ASEC the North Korea-linked Lazarus Group has been observed weaponizing flaws in an undisclosed software to breach a financial business entity in South Korea twice within a span of a year. thehackernews.com/2023/03/lazaru… @TheHackersNews

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

3 years ago

#iswr #ransomware can be decrypted!!! iswr ransomware is a variant of #STOP ransomware. #AhnLab #ASEC offers a free script for decrypting files infected by iswr ransomware. 😆asec.ahnlab.com/en/48989/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

3 years ago

CHM Malicious File Disguised as Security Email from a Korean Financial Company #RedEyes #Scarcruft asec.ahnlab.com/en/49089/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

3 years ago

ASEC has recently discovered the installation of the #PlugX #malware through the Chinese remote control programs #Sunlogin and #Awesun’s remote code execution #vulnerability asec.ahnlab.com/en/49097/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

3 years ago

#Lazarus exploited a zero-day #vulnerability in Korea’s widely used digital signature authentication software. They attacked Korean defense contractors, satellite companies, IT, and media companies. #0day This report will be translated into English soon. asec.ahnlab.com/ko/48416/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

3 years ago

Anti-Forensic Techniques Used By #Lazarus Group - Data Hiding: Encryption, Other Forms of Data Hiding - Artifact Wiping: File Wiping - Trail Obfuscation: Timestamp Changes 📝Analysis by #AhnLab #ASEC #AFIRST asec.ahnlab.com/en/48223/

AhnLab_ASEC Profile Picture

AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC

3 years ago

#Magniber #Ransomware’s Relaunch Technique using Windows Registry 🤐 Registering to be relaunched is a preliminary phase of encryption. asec.ahnlab.com/en/48312/

Trends for United States

#VMAs
602 B posts
Ravens
53,8 B posts
Packers
87,9 B posts
Ricky Martin
6.536 posts
Lions
113 B posts
Tate
46,4 B posts
ariana
200 B posts
Bills
117 B posts
#GoPackGo
14,1 B posts
Titans
56,7 B posts
Gaga
130 B posts
Moody
27,5 B posts
Cam Ward
10,8 B posts
Broncos
50,6 B posts
Doja
79,5 B posts
Callahan
7.854 posts
Purdy
16,1 B posts
Jessica Simpson
1.104 posts
Josh Allen
9.697 posts
Texans
32,5 B posts

You might like

Threat Researcher at @socradar | Malware Researcher | Threat Hunter | CTI ¦ Former @ElevenPaths @Panda_Security
Aaron Jornet
@RexorVc0
4K Followers
A branch of the @eSentire Threat Response Unit (TRU)
eSentire Threat Intel
@esthreat
1K Followers
Malware and cybercrime | Cyber Threat Intelligence Analyst at @PRODAFT
3xp0rt
@3xp0rtblog
15K Followers
a big fan of lazarus.
lazarusholic
@lazarusholic
2K Followers
Insights from the Digital Forensics/Incident Response and Threat Research Team at SECUINFRA. We regularly publish reports, detection rules and other findings!
SECUINFRA FALCON TEAM
@SI_FalconTeam
3K Followers
Researching malware @ Kaspersky GReAT
Georgy Kucherin
@kucher1n
4K Followers
Malware Analysis Creator of Debloat, certReport, and https://t.co/w4rAuuB7O0 Want to chat? Join the Debloat discord: https://t.co/ZcWIqa6ZA9
Squiblydoo
@SquiblydooBlog
4K Followers
The official Twitter account for 13Cubed. Follow @davisrichardg for my personal account.
13Cubed
@13CubedDFIR
7K Followers
Follow us for the latest blogs and IOCs from Team Cymru Threat Research A part of @teamcymru
Team Cymru Threat Res...
@teamcymru_S2
5K Followers
Malware slayer Member of @CuratedIntel
Arkbird
@Arkbird_SOLG
15K Followers
Real Intrusions by Real Attackers, the Truth Behind the Intrusion. Services: https://t.co/XW613EKt2w
The DFIR Report
@TheDFIRReport
62K Followers
Threat hunting & detection writing
Yogesh Londhe
@suyog41
3K Followers
Fighting cyber threats one research at a time. News from Check Point’s (@checkpointSW) Research team.
Check Point Research
@_CPResearch_
23K Followers
A #SOCplatform boosted by #AI and #threatintelligence, combining #SIEM, #SOAR, #Automation in a single solution. Used by End-users, MSSP and APIs
Sekoia.io
@sekoia_io
4K Followers
Technical Twitter of QiAnXin Technology, leading Chinese security vendor. It is operated by RedDrip Team which focuses on malware, APT and threat intelligence.
RedDrip Team
@RedDrip7
16K Followers