iEmoji Feeds @ξ¨ International Phish Actors Expose! (ActorExpose)
1.
ξ¨ International Phish Actors Expose!
@ActorExpose
#Qakbot PDF Luring #TTPs
Seems that after Microsoft unofficial patched a Mark of the Web, TA switched from HTMLβ¦ twitter.com/i/web/status/1β¦
Seems that after Microsoft unofficial patched a Mark of the Web, TA switched from HTMLβ¦ twitter.com/i/web/status/1β¦
2.
ξ¨ International Phish Actors Expose!
@ActorExpose
MySwisscom #phishing login page active since 2021/12/15
/swisscomrechnung-99bb77.ingress-comporellon.easywpβ¦ twitter.com/i/web/status/1β¦
/swisscomrechnung-99bb77.ingress-comporellon.easywpβ¦ twitter.com/i/web/status/1β¦
Retweet of status by @phishgalore
3.
4.
5.
ξ¨ International Phish Actors Expose!
@ActorExpose
This is why I #radare2 #base64 encoded strings...no need to extract/write complicated scripts, just tell r2 toβ¦ twitter.com/i/web/status/1β¦
Retweet of status by @philofishal
International Phish Actors Expose!
@ActorExpose
Just observed next level unicode normalization β in HTTP parameters!
So:
/search?q=pew
/search?Ι=pew (%C9%8B)β¦ twitter.com/i/web/status/1β¦
So:
/search?q=pew
/search?Ι=pew (%C9%8B)β¦ twitter.com/i/web/status/1β¦
Retweet of status by @0xInfection
International Phish Actors Expose!
@ActorExpose
What a long list, right?
Anyway, not remember seeing .NET ransomware using rstrtmgr before...
@demonslay335 pic.twitter.com/ocYUfU9ue4
Anyway, not remember seeing .NET ransomware using rstrtmgr before...
@demonslay335 pic.twitter.com/ocYUfU9ue4
Retweet of status by @malwrhunterteam
...but wait! There's more!
1.
fakhright
@fakhright
astaghfirullah peng.krim guaaaaaaaa..............a *salto sambil solat*
2.
ReganBrittany
@ReganBrittany
Nanana diva is the female version of the hustlaaaa! #gettinmoney
3.
Rickygonz1215
@Rickygonz1215
If I weighed 182 I'd be cut
