Mikhail Kasimov

@500mk500

Malicious traffic detection system: @maltrail; Maltrail Demo Page: maltraildemo.github.io; Maltrail FAQ: bit.ly/3IM9z07

Ukraine, Kiev

maltrail.github.io

Joined January 2016

639 Following

5,430 Followers

Replies Reposts Media

Pinned
Mikhail Kasimov
@500mk500
Jun 6, 2025
Generalization is the key on solving the problem of "you-have-wrong-attribution" discussions.
LetsDefend
@LetsDefendIO
Jun 5, 2025
Cybersecurity Terminology
3
Mikhail Kasimov
@500mk500
Oct 4
FYI
Denis
@unmaskparasites
Oct 4
"DDoS-Guard verification" ClickFix malware. It uses DNS TXT records of luqiuid91[.]com to retrieve payloads urlscan.io/search/#filena…
Mikhail Kasimov
@500mk500
Sep 26
+ lurkershield\.com safepayguard\.com webcache-cache\.com webcachecache\.com feedback-bundle\.com assets-bundle\.com feedbackbundle\.com static-secure\.com analytics-secure\.com doubleclickpro\.com jquery-bootstrap\.com captchatimestamp\.com feedback-hotjar\.com #magecart 1/2
Report URI
@reporturi
Sep 25
Replying to @reporturi
☠️IoC list for defenders: specterguardian\.com solutionjquery\.com assetsbundle\.com safeprocessor\.com gtmtimestamp\.com doubleclickcache\.com websitewebcache\.com explorerbrowser\.com
1
Mikhail Kasimov
@500mk500
Aug 3
cas-edu\.com cas-edu\.org china-robot\.online china-robot\.org eps-expo\.com gcl-power-cn\.org humanoid-robot\.online ljewmte\.org tickimmazy\.org wtechnote\.org #APT #Patchwork
Sudeep_Singh
@SinghSoodeep
Aug 3
Dropping Elephant targets East Asia using ICASSE decoy theme. LNK MD5: a02dca4d1487f9141a90f3b11aa08d64 Malicious DLL: f8f03a6a3edbf7985469de26bdfb5e97 Base64-encoded and XOR-encrypted shellcode: fdfce91c0a9758a24ea98b48c44fdc9c .NET assembly payload:
Mikhail Kasimov
@500mk500
Jun 3
Some add-on for C2 domains list: aputuptherehe\.org galsoillyoucom\.org happygoluckybutterfly\.com malevolencecheats\.com #osx #fluttershell
Virus Bulletin
@virusbtn
Jun 3
Unit 42 analyses Operation FlutterBridge, a macOS malvertising campaign that seems to be the next stage of JSCoreRunner. The attackers now deliver adware with full backdoor capabilities through a payload dubbed FlutterShell. unit42.paloaltonetworks.com/flutterbridge-…