neonprimetime security , just trying to help

found by Angel Hun @SeraphimDomain mosbussum[.]nl/a3.exe I *think* its EvilAmmy: https://twitter.com/SeraphimDomain/status/98081117439981978...

found by @James_inthe_box #quantloader #malspam run: "Emailing: <characters>", zip (is muffed, base64 file) -> smblink ...

found by My Online Security @dvk01uk https://twitter.com/dvk01uk/status/981918736729899009 Fake HSBC “Action needed: Activity confirmation” ...

found by James @James_inthe_box incoming #hancitor run: "Notice from UPS", details coming: Still dropping #pandabanker https://tw...

Are your orgs users used to downloading and updating their own software? Then this could be a problem. “... payload was NetSupport RAT ...

“... enables an attacker to remotely execute arbitrary code without authentication. So it allows getting full control over a vulnerable net...

“... used phishing attacks to harvest credentials from affected staff members and used these to gain access...” https://www.zdnet.com/a...