Cluster25 @cluster25_io

Worldwide Joined April 2021

Tweets

101
Followers

1K
Following

0
Likes

36

Cluster25 @cluster25_io

2 years ago

🚨@cluster25_io investigated a possible #APT campaign targeting #Russian dissidents. Using different lures, the #attacks aimed at organizations and citizens, leveraging a #reverseshell. Read more on: blog.cluster25.duskrise.com/2024/01/30/rus…

0 16 36 5K 7

🚨A seemingly legitimate #LinkedIn profile contacts you via direct message and offers you a job, sending a PDF file. This is the beginning of a bad story that leads to #DUCKTAIL infection. Read more on: blog.cluster25.duskrise.com/2023/10/25/the…

0 10 29 3K 6

Cluster25 @cluster25_io

2 years ago

🚨 Cluster25 has uncovered phishing attacks likely linked to a pro-Russia nation-State adversary. These attacks, conducted in the context of the RU-UA conflict zone, leverage a recently discovered vulnerability (CVE-2023-38831) affecting WinRAR. Read more: blog.cluster25.duskrise.com/2023/10/12/cve…

0 9 10 2K 0

Cluster25 @cluster25_io

2 years ago

We are happy to announce that #Cluster25 is now integrated with #OpenCTI through a dedicated connector. OpenCTI connectors are a crucial components to enable organizations to easily ingest, enrich and/or export data. github.com/OpenCTI-Platfo…

0 1 3 859 0

Cluster25 @cluster25_io

2 years ago

🚨Beware of #BEC #attacks! Here, we are reporting a recent, well-prepared #fraud campaign involving the names of existing non-profit foundations as bait. Read more on: blog.cluster25.duskrise.com/2023/08/25/the… #cybersecurity #scam

0 6 11 1K 1

Cluster25 @cluster25_io

2 years ago

#BlackByte and his #ransomware continue operating all around the world, we dissected the latest version of this famous ransomware. Here the #Ida #Python script we used: github.com/Microv/BlackBy… Here the report: blog.cluster25.duskrise.com/2023/05/22/bac… Hoping this helps the community!

0 5 8 1K 1

Cluster25 @cluster25_io

2 years ago

@cluster25_io has become partner of @dns0eu project! Starting April 27, 2023, Cluster25 started sharing its #APT, #Phishing / #Fraud and #Malware indicators with DNS0 in order to further raise the #security levels of its users. blog.cluster25.duskrise.com/2023/05/02/c25…

0 7 10 962 1

Cluster25 @cluster25_io

2 years ago

The #chemical sector is definitely considered a critical infrastructure with #strategic goals, so it's a very attractive target for #threat actors. Check out our overview about the #cyber #risks of the chemical sector! blog.cluster25.duskrise.com/2023/04/12/cyb…

0 4 6 893 1

Cluster25 @cluster25_io

3 years ago

@cluster25_io joined the @virustotal community! Starting from March 2023, part of our intelligence data will be shared with this amazing community, allowing users to get insights about suspicious IPs, domains, and URLs. Enjoy our public #Intelligence! blog.cluster25.duskrise.com/2023/03/16/c25…

0 7 11 915 0

Dominic Alvieri @AlvieriD

3 years ago

LockBit posts Cantina Tollo winery collective in Italy. Alan I suggest the Montepulciano d’Abruzzo which pairs well with hacking. /cantinatollo.it @uuallan #cybersecurity @cluster25_io @agenzia_nova #cybersecurity #infosec #lockbit

0 3 15 3K 0

Download Image

Cluster25 @cluster25_io

3 years ago

Newly registered domain belonging to #Gamaredon #APT #infrastructure secureurl[.]shop

2 3 9 4K 1

Cluster25 @cluster25_io

3 years ago

Another year has passed tracking #cybercriminals. This year has been particularly intense from a #cyber point of view also due to the conflict between Russia and Ukraine. We are pleased to share an infographic about the activities conducted by the Cluster25 team in the year 2022.

0 4 5 890 0

Download Image

Dominic Alvieri @AlvieriD

3 years ago

Alessandria Hospital in Italy has allegedly been breached with samples provided by Ragnar Locker. Azienda Ospendaliera di Alessandria /ospendale.al.it @cluster25_io #cybersecurity #infosec #RagnarLocker

0 3 8 1K 0

Download Image

Cluster25 @cluster25_io

3 years ago

⚠️We analyzed a highly evasive #infostealer spread across #Italian entities in early Dec. 2022. The attacker used several level of obfuscation and packing techniques to hinder and make analysis more difficult. Happy reading 👇 blog.cluster25.duskrise.com/2022/12/22/an-…

0 8 13 3K 6

Cluster25 @cluster25_io

3 years ago

#noname(057)16 has DDoSed the website of the italian Ministry of Agricolture #ministerodellagricoltura. @cluster25_io analyzed the tool used by the Russian speaking group called DDOSIA Project. Total number of users: 726, main server on 109.107.181.130 and geolocated in Russia.

0 5 7 0 4

Download Image

Cluster25 @cluster25_io

3 years ago

⚠️New blog post: #BlackReward has leaked confidential data from the #iranian #Nuclear Power Production and Development (#NPPD). In the documents it's shown a link between Moscow and Teheran. #leak #russia #iran blog.cluster25.duskrise.com/2022/11/07/ira…

0 4 12 0 1

Alex @ciffo17

3 years ago

On 10/10/22, the main #Pakistani email #CTD account was disrupted by malicious attacks by stealing some confidential information. Thanks to @ArifMehmoodPAK @cluster25_io acquired so far investigations identified an infiltration from Pakistan and not from #EU #CyberSec #InfoSec