2024-01-23 (TUESDAY): ULTRAVNC INFECTION

NOTES:

• Zip files are password-protected.  Of note, this site has a new password scheme.  For the password, see the "about" page of this website.

ORIGINAL REFERENCE:

• https://twitter.com/Tac_Mangusta/status/1749763630847987861

REFERENCES:

• https://www.linkedin.com/posts/unit42_ultravnc-timelythreatintel-indicatorsofcompromise-activity-7156060867678150657-ktbL
• https://twitter.com/Unit42_Intel/status/1750295249174372862

ASSOCIATED FILES:

• 2024-01-23-IOCs-from-UltraVNC-infection.txt.zip   2.0 kB   (2,023 bytes)
• 2024-01-23-UltraVNC-infection-traffic.pcap.zip   6.1 MB   (6,123,867 bytes)
• 2024-01-23-UltraVNC-malware-and-artifacts.zip   5.4 MB   (5,397,980 bytes)

 

Click here to return to the main page.