Bas tradamus
@BastradamusCompletionist
0 followers12 downloads43 copies1 like650 views
3 detections
Filters
Last updated
All Time
Detection languages
2
1
Categories
2
1
Platforms
2
2
1
1
Products / Services
1
1
MITRE Techniques
2
2
1
CVEs
1
Detecting post-exploitation attempts based on RomCom group adversary activity and the following malware/backdoor signatures: Mythic agent, SnipBot and MeltingClaw.
Based on the following threat reports after the WinRAR CVE-2025–8088 exploitation.
1. ESET: https://www.welivesecurity.com/en/eset-research/update-winrar-tools-now-romcom-and-others-exploiting-zero-day-vulnerability/
2. Talos: https://blog.talosintelligence.com/uat-5647-romcom/
Based on the following threat reports after the WinRAR CVE-2025–8088 exploitation.
1. ESET: https://www.welivesecurity.com/en/eset-research/update-winrar-tools-now-romcom-and-others-exploiting-zero-day-vulnerability/
2. Talos: https://blog.talosintelligence.com/uat-5647-romcom/
Detects strong indicators of a successful device code phishing attack.
Detects a spike in undeliverable emails, this can be an early indication of a targeted phishing campaign or a compromised user account.