Possible Phishing 🎣
on: ⚠️hxxps[:]//bttntrernet[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6861d3a43b7750000a0e8878
#cybersecurity #phishing #infosec #urldna #scam #infosec
#infosec
This was a fun trojan for Windows XP from 2004 that I found on the #Slashdot archives. We've come a long way since SSL became more commonplace.
Back then, these network guys were pretty lucky to catch their user trying to run this. #infosec #cybersecurity
https://web.archive.org/web/20060707233528/https://isc.incidents.org/diary.php?date=2004-06-29
Possible Phishing 🎣
on: ⚠️hxxp[:]//pub-16499d352cc14fe4b8cdf064bb205547[.]r2[.]dev/4outmanagementsecure[.]html
🧬 Analysis at: https://urldna.io/scan/6861f3b73b77500011d3c901
#cybersecurity #phishing #infosec #urldna #scam #infosec
Possible Phishing 🎣
on: ⚠️hxxp[:]//asd98as9dyagsd[.]blogspot[.]com/?m=1
🧬 Analysis at: https://urldna.io/scan/6861f3ae3b7750000fca747a
#cybersecurity #phishing #infosec #urldna #scam #infosec
This dumb password rule is from Vietnam Airlines.
`[[:alnum:]]{6,8}`
https://dumbpasswordrules.com/sites/vietnam-airlines/
#password #passwords #infosec #cybersecurity #dumbpasswordrules
Possible Phishing 🎣
on: ⚠️hxxps[:]//lkdin[.]io
🧬 Analysis at: https://urldna.io/scan/6861d1b13b7750000a0e8847
#cybersecurity #phishing #infosec #urldna #scam #infosec
Possible Phishing 🎣
on: ⚠️hxxps[:]//attconsultant[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6861d38e3b7750000ee5dd1c
#cybersecurity #phishing #infosec #urldna #scam #infosec
Possible Phishing 🎣
on: ⚠️hxxps[:]//aw7-webde-4ys6hha-wxi-bt[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6861cd993b7750000ca3e2ef
#cybersecurity #phishing #infosec #urldna #scam #infosec
Possible Phishing 🎣
on: ⚠️hxxps[:]//jurioma6-9[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6861d1733b7750000ee5dc69
#cybersecurity #phishing #infosec #urldna #scam #infosec
Possible Phishing 🎣
on: ⚠️hxxps[:]//attsecureit[.]github[.]io
🧬 Analysis at: https://urldna.io/scan/6861d7983b7750000ee5de32
#cybersecurity #phishing #infosec #urldna #scam #infosec
Possible Phishing 🎣
on: ⚠️hxxps[:]//sweepstakes606[.]godaddysites[.]com
🧬 Analysis at: https://urldna.io/scan/6861d7963b7750000f058f3a
#cybersecurity #phishing #infosec #urldna #scam #infosec
2025-06-29 RDP #Honeypot IOCs - 31329 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
24.173.30.170 - 20463
188.213.128.212 - 10668
185.156.73.154 - 21
Top ASNs:
AS11427 - 20463
AS29222 - 10668
AS210848 - 39
Top Accounts:
hello - 31200
Administr - 45
Test - 30
Top ISPs:
Charter Communications Inc - 20463
Infomaniak Network SA - 10668
DigitalOcean, LLC - 36
Top Clients:
Unknown - 31329
Top Software:
Unknown - 31329
Top Keyboards:
Unknown - 31329
Top IP Classification:
Unknown - 20565
mobile & hosting - 10668
hosting - 96
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/58FUueWY
2025-06-29 RDP #Honeypot IOCs - 20886 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
24.173.30.170 - 13642
188.213.128.212 - 7112
185.156.73.154 - 14
Top ASNs:
AS11427 - 13642
AS29222 - 7112
AS210848 - 26
Top Accounts:
hello - 20800
Administr - 30
Test - 20
Top ISPs:
Charter Communications Inc - 13642
Infomaniak Network SA - 7112
DigitalOcean, LLC - 24
Top Clients:
Unknown - 20886
Top Software:
Unknown - 20886
Top Keyboards:
Unknown - 20886
Top IP Classification:
Unknown - 13710
mobile & hosting - 7112
hosting - 64
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/41cgAjzA
2025-06-29 RDP #Honeypot IOCs - 10443 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
24.173.30.170 - 6821
188.213.128.212 - 3556
185.156.73.154 - 7
Top ASNs:
AS11427 - 6821
AS29222 - 3556
AS210848 - 13
Top Accounts:
hello - 10400
Administr - 15
Test - 10
Top ISPs:
Charter Communications Inc - 6821
Infomaniak Network SA - 3556
DigitalOcean, LLC - 12
Top Clients:
Unknown - 10443
Top Software:
Unknown - 10443
Top Keyboards:
Unknown - 10443
Top IP Classification:
Unknown - 6855
mobile & hosting - 3556
hosting - 32
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/TiyLjEFp
Possible Phishing 🎣
on: ⚠️hxxps[:]//ulster-ac-uk[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6861d1a73b7750000ee5dccf
#cybersecurity #phishing #infosec #urldna #scam #infosec
Client Info
Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst