vmprotect

ACR Stealer acrstealer[.]top justlittleluxuriedrs[.]shop longstoryshortdesigndes[.]shop magneticcitizen[.]shop 116.202.44.220 83.147.255.219

hi threat hunters and malware analysts! I’ve shared my new C2 hunting, reporting, and visualization tool, "Keklick," on github! It helps you discover and manage potential domains/IPs related to C2 infrastructure. Happy hunting! keklick: github.com/0x6rss/keklick

Expading your hunting with domainhunter.pro craxs-rat-seller[.]xyz craxs-rat[.]com craxsrat[.]work craxsratbuy[.]store craxstore[.]shop craxsahnesi[.]xxx craxsratandroid[.]com craxs-rat-selller[.]com craxsrat-craxs-rat[.]com avscraxs[.]xyz craxsrat[.]sbs craxsrat[.]org…

Brazil was among the top targets of IconAds, a large-scale mobile ad fraud campaign that abused 350+ Android apps to serve hidden, out-of-context ads. Android ad fraud is getting stealthier, layered obfuscation, icon cloaking, and runtime DEX loading are the new normal.

A recent phishing campaign is abusing the Anydesk brand: anydesktenewo[.]com anydeskxxvvza[.]top anydeskxxvvzb[.]top anydeskxxvvzc[.]top anydeskxxvvzd[.]top anydeskxxvvzm[.]top anydeskxxvvzn[.]top anydeskxxvvzs[.]top anydeskxxvvzv[.]top anydeskxxvvzx[.]top anydeskxxvvzz[.]top…

Recent domains for fake @GooglePlay googleplayasd[.]com googleplaybhj[.]com googleplayct[.]com googleplaycvb[.]com googleplaydyh[.]com googleplayfgh[.]com googleplaygd[.]com googleplayiop[.]com googleplayja[.]com googleplayjkl[.]com googleplayjp[.]com googleplaykhg[.]com…

hxxps://apkcrypter.net (Advanced Malware Crypter) Suspicious wallets: 'Bitcoin', address: 'bc1qhv7nq73lz3s559zrr2pk4yr6qacal29q0h8anp 'Ethereum', address: '0x9C325989e429cd149f7963F81F808d3Fe7E24398 'TRC20 USDT', address: 'TKDC9CnQFGXA8prDgtkKie7JzrSHYt7ddq