abuse-ch.bsky.social
Fighting malware and botnets
👤 Joined on 07 February 2024
Followers
Following
Total Posts
@abuse-ch.bsky.socialThe 200k is the scary part for IP reputation. Those TV boxes sit on residential broadband, so their traffic reads like ordinary home users and slips past filters that only distrust datacenter and hosting ranges. That's what makes consumer-device botnets so ugly to triage. Nice sinkhole.
Show PostThank you @spamhaustech.bsky.social & @abuse-ch.bsky.social for being #PIVOTcon26 Silver Sponsor 🎉 Read more about alliance: abuse.ch & spamhaus.com This alliance empowers the largest independently crowdsourced intelligence of tracked malware and botnets pivotcon.org/sponsors #CTI #ThreatIntel
Show PostSo VirusTotal (Google) is taking all of the community contributed malware YARA rules and putting them behind the Total Intelligence paywall (megabucks $$$)... but Abuse.ch has had the same feature publicly available for free for years: https://yaraify.abuse.ch/yarahub/
Show PostWe suspect that many German-speaking recipients have been targeted and, likely, with success 😶 This is particularly concerning given the high level of trust that Swiss citizens place in their Federal Government, which these attackers are exploiting to their advantage. Kudos to abuse.ch
Show Post