November 20, 2023
Severity Medium Analysis Summary Agent Tesla is a very popular spyware Trojan built for the.NET framework. Since its initial appearance in 2014, this has been deployed […]
Rewterz Threat Alert – APT Group Gamaredon Targeting Ukraine With A New InfoStealer – Active IOCs
September 18, 2022Rewterz Threat Alert – RedLine Stealer – Active IOCs
September 19, 2022Rewterz Threat Alert – APT Group Gamaredon Targeting Ukraine With A New InfoStealer – Active IOCs
September 18, 2022Rewterz Threat Alert – RedLine Stealer – Active IOCs
September 19, 2022
Severity
High
Analysis Summary
A new Mirai variant is making the rounds called mirai_pteamirai. This botnet is one of the significant botnets targeting exposed networking devices running Linux. Mirai means ‘future’ in Japanese. This botnet is one of the active botnet and used to cause DDoS conditions. IP cameras, home routers, and other IoT devices are the common targets of this botnet.
Impact
- Server Outage
- Data Loss
- Website Downtime
Indicators of Compromise
MD5
- 52b53c279a474bafbdc6a03f9b923f90
- 9c306d1470fc1c51bbc6042b21397544
- f8377872ef857ce3f897f6c767e6719b
SHA-256
- cd59fd84c1f1219d929ba3aee859ab295875eba69fb31d6cf310e3f39cf836b0
- 3d77673ab96b72019442907b0f799bb60d35ff09c8fd82113172710881a348cc
- 357fde18ac7764dff6b72d2eb176dc72bcf7ba2011c3d8bd4a832ebcbcc263c9
SHA-1
- 9bb2682a2f2a56aae2ab30127fc84409f0b37cd5
- b5d8735d456a774ece95c0fcd61d9c849fbeee5b
- 0a9f0f055a053d0150f3a0abe1c4cf0da80e24ba
Remediation
- Upgrade your operating system.
- Don’t open files and links from unknown sources.
- Install and run anti-virus scans.