SecuriTricks - redline

Attack Reports

Title	Published	Tags	Description	Number of indicators
The Abuse of ITarian RMM by Dolphin Loader	Aug. 19, 2024, 1:24 p.m.	stealthy python lummac2 rhadamanthys rmm darkgate redline autoit malware-as-a-service sectoprat 2024-08-19 itarian evade dolphin loader	This report explores how the Dolphin Loader, a malware-as-a-service loader, abuses the legitimate ITarian Remote Monitoring and M…	24
Multiple Malware Dropped Through MSI Package	Aug. 14, 2024, 11:14 a.m.	powershell stealer persistence dropper redline c2 2024-08-14 sectoprat	An analysis reveals the distribution of malware through an MSI package, specifically SectopRat and Redline stealer. The malware e…	11
Unfurling Hemlock: Threat group uses cluster bomb campaigns	July 1, 2024, 10:54 a.m.	amadey redline smokeloader 2024-07-01 risepro mystic stealer cluster bomb mass distribution eastern european stealers	A threat actor dubbed Unfurling Hemlock has been observed distributing hundreds of thousands of malware samples in a campaign las…	55
Profiling Trafficers: Cerberus	May 10, 2024, 9:02 a.m.	malware infostealer russia 2024-05-05 2024-05-06 2024-05-07 lumma stealer 2024-05-08 aurora stealer redline hacking cybercrime rhadamanthys stealer casbaneiro metamorfo dracula stealer (samurai) 2024-05-09 2024-05-10	This analysis delves into the activities of a group of malware operators known as Cerberus (formerly Amnesia) Team, who specializ…	24