Tim Brown

Results 258 issues of Tim Brown

### Area Malware reports ### Parent threat _No response_ ### Finding https://twitter.com/_larry0/status/1143532888538984448 ### Industry reference Silex ### Malware reference _No response_ ### Actor reference _No response_ ### Component _No response_...

new
missing:tactics
missing:tag:T1048
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1567
missing:tag:T1573
missing:tag:T1590
missing:tag:T1562.004

### Area Malware reports ### Parent threat _No response_ ### Finding https://www.cadosecurity.com/post/team-tnt-the-first-crypto-mining-worm-to-steal-aws-credentials ### Industry reference TeamTNT ### Malware reference _No response_ ### Actor reference _No response_ ### Component _No response_...

new
missing:tactics
missing:tag:T1005
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1567
missing:tag:T1573
missing:tag:T1070.006
missing:tag:T1053.007
missing:tag:T1098.004
missing:tag:T1609
missing:tag:T1610
missing:tag:RedirectionToNull
missing:tag:T1037
missing:tag:T1001
missing:tag:T1552.004
missing:tag:T1037.004

### Area Supply chain attacks ### Parent threat _No response_ ### Finding https://scarybeastsecurity.blogspot.com/2011/07/alert-vsftpd-download-backdoored.html ### Industry reference VsFTPd ### Malware reference _No response_ ### Actor reference _No response_ ### Component _No...

new
missing:tactics
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1491
missing:tag:T1567
missing:tag:T1573
missing:tag:T1590
missing:tag:T1027.002
missing:tag:T1518
missing:tag:T1021.001
missing:tag:T1071.002
missing:tag:wltm
missing:tag:IRC

### Area Malware reports ### Parent threat _No response_ ### Finding https://twitter.com/billyleonard/status/1458531997576572929 ### Industry reference _No response_ ### Malware reference Rekoobe TSH TINYSHELL https://github.com/timb-machine/linux-malware/issues/481 ### Actor reference APT31 ### Component...

new
missing:tactics
missing:tag:T1005
missing:tag:T1048
missing:tag:T1071.001
missing:tag:T1567
missing:tag:T1573
missing:tag:T1027.002
missing:tag:T1560

### Area Supply chain attacks ### Parent threat _No response_ ### Finding https://portswigger.net/daily-swig/backdoor-planted-in-php-git-repository-after-server-hack ### Industry reference PHP ### Malware reference _No response_ ### Actor reference _No response_ ### Component _No...

new
missing:tactics
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1567
missing:tag:T1573
missing:tag:T1590
missing:tag:T1021.002
missing:tag:JavaScript

### Area Malware reports ### Parent threat _No response_ ### Finding https://www.intezer.com/blog/malware-analysis/linux-rekoobe-operating-with-new-undetected-malware-samples/ ### Industry reference _No response_ ### Malware reference Rekoobe ### Actor reference APT31 ### Component Linux ### Scenario...

new
missing:tactics
missing:tag:T1005
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1567
missing:tag:T1573
missing:tag:T1021.002
missing:tag:T1027.002
missing:tag:T1053.003
missing:tag:T1205
missing:tag:ProcessTreeSpoofing

### Area Malware reports ### Parent threat _No response_ ### Finding https://blog.sekoia.io/walking-on-apt31-infrastructure-footprints/ ### Industry reference https://github.com/timb-machine/linux-malware/issues/480 ### Malware reference Rekoobe TSH https://github.com/timb-machine/linux-malware/issues/481 ### Actor reference APT31 ### Component Linux ###...

new
missing:tactics
missing:tag:T1005
missing:tag:T1048
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1567
missing:tag:T1573
missing:tag:T1590
missing:tag:T1021.002
missing:tag:T1027.002
missing:tag:T1560
missing:tag:T1222
missing:tag:T1548.001

### Area Malware reports ### Parent threat _No response_ ### Finding https://github.com/akamai/akamai-security-research/tree/main/malware/panchan ### Industry reference _No response_ ### Malware reference Pan-chan [/malware/binaries/pan-chan](../tree/main/malware/binaries/pan-chan) ### Actor reference _No response_ ### Component Linux...

new
missing:tactics
ignore:submodule

### Area Malware reports ### Parent threat _No response_ ### Finding https://www.akamai.com/blog/security/new-p2p-botnet-panchan ### Industry reference _No response_ ### Malware reference Pan-chan https://github.com/timb-machine/linux-malware/issues/477 ### Actor reference _No response_ ### Component Linux...

new
missing:tactics

### Area Malware reports ### Parent threat _No response_ ### Finding https://xorl.wordpress.com/2022/06/22/the-forgotten-suaveeyeful-freebsd-software-implant-of-the-equation-group/ ### Industry reference _No response_ ### Malware reference _No response_ ### Actor reference _No response_ ### Component Linux...

new
missing:tactics
missing:tag:T1005
missing:tag:T1048
missing:tag:T1057
missing:tag:T1070.003
missing:tag:T1070.004
missing:tag:T1071.001
missing:tag:T1083
missing:tag:T1491
missing:tag:T1546.004
missing:tag:T1552.003
missing:tag:T1567
missing:tag:T1573
missing:tag:T1021.002
missing:tag:T1027.002
missing:tag:T1560
missing:tag:Non-persistentStorage
missing:tag:T1222
missing:tag:T1548.001
missing:tag:T1070.006
missing:tag:RedirectionToNull
missing:tag:T1574.007
missing:tag:T1001