A Peek Inside a Milw0rm Syndicating Remote Execution Flaws Exploitable IRC Scanning Botnet – An Analysis

Who would have thought? An IRC based botnet that’s directly syndicating remotely exploitable flaws and actually scanning for them using an IRC based bothet? Takes you back doesn’t it? This has been a daily practice since practically 2008 and I’ve decid… Continue reading A Peek Inside a Milw0rm Syndicating Remote Execution Flaws Exploitable IRC Scanning Botnet – An Analysis

Posted in Uncategorized

A Peek Inside a Mass SQL Injection Scanning and Exploiting IRC Botnet – An Analysis

Who would have thought? A mass SQL injection scanning and remotely exploitable including fuzzing capabilities built-in IRC-based botnet? I’ve decided to share with everyone some sample screenshots on the process with the idea to raise everyone’s awaren… Continue reading A Peek Inside a Mass SQL Injection Scanning and Exploiting IRC Botnet – An Analysis

Posted in Uncategorized

A Peek Inside a DIY iFrame Embedded DDoS Attack Script Targeting Iran-Based Web Sites – An Analysis

With basic iFrame injecting scripts making their rounds back in 2008 including their use and participation in actual crowd-sourced DDoS attack campaigns internationally I’ve decided to share with everyone a sample screenshot of a sample iFrame DDoS scr… Continue reading A Peek Inside a DIY iFrame Embedded DDoS Attack Script Targeting Iran-Based Web Sites – An Analysis

Posted in Uncategorized

A Peek Inside the Zalupko Accounting Data Stealing Malicious Software Botnet – An Analysis

Who would have thought? Takes you back doesn’t it? As I’ve been going deep inside my old threat intelligence archive circa 2008 I’ve decided to share with everyone several never published or released before screenshots of the Zalupko accounting data st… Continue reading A Peek Inside the Zalupko Accounting Data Stealing Malicious Software Botnet – An Analysis

Posted in Uncategorized

Exposing Russian Business Network’s Mykhaylo Sergiyovich Rytikov’s AbdAllah Internet Hizmetleri Bulletproof Hosting Provider on U.S Secret Service’s Most Wanted Cybercriminals List

I’ve decided to share with everyone some actionable intelligence on one of the Russian Business Network’s primary franchise networks in Turkey namely AbdAllah Internet Hizmetleri which back in the day used to be responsible for some pretty decent … Continue reading Exposing Russian Business Network’s Mykhaylo Sergiyovich Rytikov’s AbdAllah Internet Hizmetleri Bulletproof Hosting Provider on U.S Secret Service’s Most Wanted Cybercriminals List

Posted in Uncategorized

Exposing a Currently Active and Spreading Cobalt Strike Serving Malicious Software Campaign

I’ve just came across to a currently circulating Cobalt Strike serving malicious software campaign and I’ve decided to share the details with everyone reading this blog.Original malware hosting location: hxxp://bsctech[.]ac[.]th/css/43[.]exeMD5: d… Continue reading Exposing a Currently Active and Spreading Cobalt Strike Serving Malicious Software Campaign

Posted in Uncategorized