Validin
790 posts
@ValidinLLC
Validin is a next generation internet intelligence platform.
5 exploit chains, 23 exploits, nation-state grade malware has leaked with the capability to mass exploit iPhones. IOCs and technical overview on our blog: iverify.io/blog/coruna-in… #iOS #malware #mobilesecurity #cybersecurity #cyberattack
Thank you @ValidinLLC for being #PIVOTcon26 Gold Sponsor🥳 Read more about: @ValidinLLC here: validin.com Validin eliminates blind spots with comprehensive DNS history and IP context data. Our sponsors: pivotcon.org/sponsors #ThreatIntel #CTI #ThreatResearch
Rapid7 dropped a write-up on the Notepad++ update-chain abuse and - finally - it comes with real IOCs - update.exe downloaded from 95.179.213[.]0 after notepad++.exe -> GUP.exe - file hashes for update.exe / log.dll / BluetoothService.exe / conf.c / libtcc.dll - network IOCs incl. api[.]skycloudcenter[.]com (-> 61.4.102[.]97), api[.]wiresguard[.]com, 59.110.7[.]32, 124.222.137[.]114 by @rapid7 rapid7.com/blog/post/tr-c…
It turned out there are many more payloads used in the Notepad++ attack! To stay undetected, its masterminds were COMPLETELY changing execution chains about every month. Here are more IPs used in the attack: 45.76.155[.]202 45.32.144[.]255 Read below for many other IoCs! [1/8]
