Discover and read the best of Twitter Threads about #lokibot

Most recents (2)

Just found an unlisted Pastebin shared by @James_inthe_box listing 124 #lokibot URLs. #osint
If you want to learn more about LokiBot, check out this write up.… #malware
If you want to learn more about my method of finding unlisted Pastebin pages, read here.… #osint
Read 3 tweets
#malspam campaign from 2.11 delivers both #LokiBot and #azorult interchangeably, archived in ISO files.
Files are packed with VB6 packer with file size of 524KB.
All C2 domains were active 31.10-2.11.
Subject: “Roxanne Heijt - Payment Swift Copy FYR”
#LokiBot #IOCs:… -> jadak[.]cf/minel/fre.php… -> barzenkiyader[.]cf/Panel/five/fre.php
#AZORult #IOCs:… -> welcome2nov[.]ga/mine/index.php… -> welcome2novv[.]gq/tuneshi/index.php… -> goodnovember[.]ml/denyo/index.php
Read 4 tweets

Related hashtags

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!