Platform
Managed Security Services
Managed Penetration Testing
Rewterz penetration testing services help organizations determine if a cyber attacker can gain access to their critical assets while giving them detailed insights of the overall business impact of a cyber attack.
Resources
June 2, 2023
Severity High Analysis Summary Shuckworm APT – aka Actinium, Armageddon, Primitive Bear, Gamaredon, and Trident Ursa – is a Russia-backed advanced persistent threat (APT) that has […]June 2, 2023Severity High Analysis Summary StormKitty information stealer is designed to compromise sensitive data from infected systems, such as login credentials, passwords, cryptocurrency wallets, and other valuable […]June 2, 2023Severity High Analysis Summary Tofsee malware has been around since 2016. Once installed on a compromised computer, it can be used to send spam emails and […]Threat Insights
Before Rewterz got its start, the market was in dire need of a specialized and dedicated information security company. It was nearly impossible for businesses to find a trustworthy provider that could truly cover all of their bases. We wanted to meet this need, giving companies across the globe a chance to get ahead while knowing that their data is in good hands.
Connect with Us
Platform
Managed Security Services
Managed Penetration Testing
Rewterz penetration testing services help organizations determine if a cyber attacker can gain access to their critical assets while giving them detailed insights of the overall business impact of a cyber attack.
Resources
June 2, 2023Severity High Analysis Summary Shuckworm APT – aka Actinium, Armageddon, Primitive Bear, Gamaredon, and Trident Ursa – is a Russia-backed advanced persistent threat (APT) that has […]June 2, 2023Severity High Analysis Summary StormKitty information stealer is designed to compromise sensitive data from infected systems, such as login credentials, passwords, cryptocurrency wallets, and other valuable […]June 2, 2023Severity High Analysis Summary Tofsee malware has been around since 2016. Once installed on a compromised computer, it can be used to send spam emails and […]Threat Insights
Before Rewterz got its start, the market was in dire need of a specialized and dedicated information security company. It was nearly impossible for businesses to find a trustworthy provider that could truly cover all of their bases. We wanted to meet this need, giving companies across the globe a chance to get ahead while knowing that their data is in good hands.
Connect with Us
Rewterz Threat Alert – Vidar Malware – Active IOCs
August 10, 2022Rewterz Threat Alert – Hive Ransomware – Active IOCs
August 10, 2022
Severity
High
Analysis Summary
A new Mirai variant is making the rounds called mirai_pteamirai. This botnet is one of the significant botnets targeting exposed networking devices running Linux. Mirai means ‘future’ in Japanese. This botnet is one of the active botnet and used to cause DDoS conditions. IP cameras, home routers, and other IoT devices are the common targets of this botnet.
Impact
- Server Outage
- Data Loss
- Website Downtime
Indicators of Compromise
MD5
- 8acf503aafd470633186888beb9dacf2
- 33e47418e88ed3c92e085b4d86f7e479
- 797b5825a92f91258d0ad40c5243e401
- 6fbf727afb12aaf2c74f6daedaf5a7cd
- 32e3c6d488a72a1c8812fb90e55ec5cd
- eb8f2ff6208631f083eb233de22dac6f
- 9c2fa0e5b21ce0329072da76ab99a543
- 42b3ea3054260cca91f5263250f45e9a
- 8ffb98d1d87bfd52145f47ceaa2b8c85
- 145ce188286315de4d6243e527545182
SHA-256
- 8844797c4419115c661a3e53314e2700bbaeaa6a5636df86b02ae068c46bbf50
- 0dd607f96e24c29cd3bb8f4e73c9506d774ca0270cb1fce1f6eb1ad156e7a1b6
- 660fc7a8ef473b1bec0237e2492276e4d2345a54e9e8b83a130e90b51381542d
- 44918bcd6713544d6b15812606cae285234475a3d311ca734a4519a4604746e4
- 919da1ef9966a90a459b47fe8840a8aa28d53c1f3a035d6494b960b6d55055d4
- d265539c998377a541624663805e26f0d6f14695bf0e542f0f3c54c0a35ad6e9
- 97202178498f2e0b3883449d55ea123504291e66641004a3b6883437f27871a2
- 8f66a0a07464287aaaa592c5e3e61c44f333c2486b8864337ddfb637d0d43da0
- 0703333499e4694b04dccddf0d3ab9e68e44671f111859ad76ebe899bd88ff5d
- 375b4a7f173b75d47ff6c6cd11640a4d037885b501584ef58a4c69fcfe73f8ee
SHA-1
- 6319e3820e2c3a350681d3a44cb1472643d1fc8e
- 131b170d8f2ec828794807aa79e8d4e8171f7f77
- 927ad3719fd464efeb5a7ea35e4fd546f179de47
- 454475ba4ec50bc2e950232b07f3e4875ab5a56f
- e9acf481e73d69037681d8428b58851fec5d99ed
- 1c780760288d57c98f4bd6e0cc8eda6d14bc402f
- bdbcdf4e0a0ca7ae03da849f138d23684b3b4167
- 3d4c8d0a4373ec627626dc42a82c463ee7f346e6
- b13dc73a1602e86173db7e5f17125480b511c20b
- f5bffb4112aba515f1790cb7c78c95a801ded618
Remediation
- Upgrade your operating system.
- Don’t open files and links from unknown sources.
- Install and run anti-virus scans.