
RobaCorazones
1.7K posts



















New Bumblebee 🐝 Signed "LLC Vector" not to be confused with the other certificate signer with the exact name signing malware out of St. Petersburg Uploaded to malwareBazzar by @1ZRR4H Trojanized Network Watcher installer bazaar.abuse.ch/sample/bd4a1d1… tria.ge/250529-nkcp2s1…


A #CypherIT crypter is being used in #LummaStealer infections. This campaign is spread via various sources. The binaries use NSIS installers and AutoIt scripts. From an infection, we also saw a clipper payload targeting cryptocurrency wallets. Details at bit.ly/3Fibxse


Some people (even some "big name" sites) are shouting in recent days that the official RVTools sites got pwned and spreading BumbleBee. Meanwhile in reality it seems there is nothing else than the usual fake sites in Google & etc spreading shit. RVTools, WinMTR, Zenmap... 🤷♂️











