Pinned Tweet
Our latest Threat Trends Digest highlights September's key #cyberthreat activity from our global telemetry & live attack observations. #IOCs in comments.
Plus: a sample MCP Server query showing how easily you can retrieve #threatintel.
malwarepatrol.net/september-…
Discord's Discoverable Server web pages will become searchable on Google, starting Nov 16th.
Beginning mid-December, eligible messages may also appear in search results.
Reviewing your settings before rollout is advisable.
mashable.com/tech/discord-pu…
CloakGuard: a signed “remote management” agent that fakes a blue screen while someone uses your PC
rogueauthority.org/cloakguar…
Malware Patrol retweeted
‼️ UPDATE: Hacker "k0t" breached 924 more Fortinet firewalls than first known, Hudson Rock says.
They hold 40,573 cleartext secrets, including 1,576 Active Directory bind passwords.
Malware Patrol retweeted
cve.now is on Twitter! Follow for critical updates: @cvedotnow
🔴 CVE-2026-107656 · Fortinet FortiSandbox
Fortinet FortiSandbox and FortiSandbox PaaS are affected by an authentication bypass flaw that lets an attacker reach protected functions through an alternate path. CVSS 9.6.
cve.now/CVE-2026-107656
Malware Patrol retweeted
We released updated Microsoft 365 configuration baselines and ScubaGear v2.0.0, featuring direct REST API calls, automated Power BI coverage, and a new Security Suite baseline to streamline M365 security.🧑💻🔗 cisa.gov/resources-tools/ser…
ALT Image depicting an astronaut figure climbing a rope on the left against a blue digital background. The text on the right reads "SCuBA Microsoft 365 Secure Configuration Baselines Update Version 2.0" with the Cybersecurity and Infrastructure Security Agency (CISA) logo in the bottom right corner.
Malware Patrol retweeted
📄 Need public files on Google Drive a normal search won't catch? @dedigger1 is a search engine built just for locating publicly accessible Google Drive files.
tools.osintnewsletter.com/os…
🚨 Launching: The OSINT Tools Library
A curated, investigator-first directory of tools used in real cases.
→ Tools.OSINTNewsletter.com
We’re building the largest and best maintained OSINT tools resource and need your help.
Reply and tag a tool we should add 👇
Malware Patrol retweeted
Les comparto este repositorio que indexa metadatos de publicaciones sobre filtraciones en DarkForums y Breach (antes BreachForums) para investigación OSINT.
Sin data filtrada ni URLs de descarga.
¿Qué pueden correlacionar con esta información?
1. Detectar filtraciones antiguas presentadas como nuevas e identificar hilos duplicados entre foros.
2. Autores y participantes activos: analizar usernames,
3. Periodos de actividad y posibles campañas: identificar patrones temporales y coincidencias entre publicaciones.
Cambios de nombre: explorar posibles vínculos entre alias utilizados durante distintas campañas
En mi repositorio también encontrarán otros dos recursos relacionados con estos foros: correos electrónicos e IPs con información de geolocalización.
El índice contiene publicaciones hasta el 16 de octubre. Si hay tiempo, procuraré actualizarlo mensualmente.
github.com/Ivancastl/LeakSco…
#OSINT #ThreatIntel #CTI #Ciberseguridad
Malware Patrol retweeted
I'm working on a unique #DFIR training for next week.
You've never seen anything like it.
It's free. Invite only. But I'll invite anyone interested.
It's the highest professional risk training I've ever attempted.
I'm letting people in my head, in real-time, on a real thing, that can have real effects in the physical world.
Standby for the what, why, where, how....
Malware Patrol retweeted
FortiGuard Labs reported that Casbaneiro’s Latin America campaign uses geofencing and distributed data-receiving servers to evade analysis and detection. fortinet.com/blog/threat-res…
Malware Patrol retweeted
Unlike criminal groups seeking financial gain, Leviathan steals trade secrets, using rapid exploitation and customized #malware to conduct espionage. Explore our threat glossary and learn how to keep your organization protected. >> zurl.co/iVdQl
#Lumu #Cybersecurity
Malicious Hashes
eec5c6c219535fba3a0492ea8118b397 59ce0baba11893f90527fc951ac69912 31549917cdc6e3f9d40a48ea5998493f 8bdd2cdd39b2ad7b679faa50f629ce2b 3849f30b51a5c49e8d1546960cc206c7 a73ddd6ec22462db955439f665cad4e6 796c596185e63803a4ec4003aa60f425
d4f0c4ab122e0a7f27ba5864934a4ca8 dbc520ea1518748fec9fcfcf29755c30 fbe51695e97a45dc61967dc3241a37dc c0fd19c0e4a252efb1864b267fb154ae cbcb58ffe45c202c11bcf2070496aed6 96dd80012c33291e1621b66f5bd66967 5116812ebf7d518f7776a1500a26296c 5294f25631d20b68ebf3a9acd4cc1f5d
Top attacking IPs (honeypots)
193.111.248.174 103.161.34.10 103.161.34.44 176.65.131.18 176.65.131.19 103.161.35.72 193.111.248.216 176.97.210.200 216.152.147.202 84.247.184.254 213.199.50.203 213.199.50.251 161.97.92.53
Malicious IPs
106.41.200.151 89.111.158.16 173.205.127.152 74.115.51.9 74.115.51.8 185.143.233.238 185.143.234.238 43.231.112.25 162.241.24.119 64.40.13.26 169.150.221.147 212.99.45.180 77.65.212.167 64.37.63.18 178.48.185.211 203.162.31.118
One intelligence source = one perspective.
See what our independent, vendor-neutral view of the threat landscape could add to your defenses.
Put your coverage to the test: malwarepatrol.net/enterprise…
#onpatrol4malware #malware
