StrikeReady Labs
@strikereadylabs.com
https://strikeready.com/blog.html
Download live malware samples mentioned here: https://github.com/StrikeReady-Inc/samples
If you prefer marketing (our product is great!) subscribe to our main page @strikeready.com
Download live malware samples mentioned here: https://github.com/StrikeReady-Inc/samples
If you prefer marketing (our product is great!) subscribe to our main page @strikeready.com
unsurprising decoy from a recent n-day
February 1, 2026 at 6:39 PM
unsurprising decoy from a recent n-day
#muddywater #apt #iran "Sajeev Saliha Beevi.doc"
167d5ab70f55c100e51833fbfea44048095889c162e1330df0631423fc547409 promoverse[.]org
167d5ab70f55c100e51833fbfea44048095889c162e1330df0631423fc547409 promoverse[.]org
January 30, 2026 at 9:12 PM
#muddywater #apt #iran "Sajeev Saliha Beevi.doc"
167d5ab70f55c100e51833fbfea44048095889c162e1330df0631423fc547409 promoverse[.]org
167d5ab70f55c100e51833fbfea44048095889c162e1330df0631423fc547409 promoverse[.]org
#patchwork #apt machine lnk id desktop-4f6tsvl
70eefab56d40d184977bce649deffaa0d1ac8f28023a5aa0aaab89d153eb2fc6 Application_Form.lnk
dce5bd0cac59f944219be8317d4591c66232c71754c0d8d310e3173501f2ad04 Application_Form.rar c2 pakistanpower[.]org
70eefab56d40d184977bce649deffaa0d1ac8f28023a5aa0aaab89d153eb2fc6 Application_Form.lnk
dce5bd0cac59f944219be8317d4591c66232c71754c0d8d310e3173501f2ad04 Application_Form.rar c2 pakistanpower[.]org
January 30, 2026 at 9:01 PM
#patchwork #apt machine lnk id desktop-4f6tsvl
70eefab56d40d184977bce649deffaa0d1ac8f28023a5aa0aaab89d153eb2fc6 Application_Form.lnk
dce5bd0cac59f944219be8317d4591c66232c71754c0d8d310e3173501f2ad04 Application_Form.rar c2 pakistanpower[.]org
70eefab56d40d184977bce649deffaa0d1ac8f28023a5aa0aaab89d153eb2fc6 Application_Form.lnk
dce5bd0cac59f944219be8317d4591c66232c71754c0d8d310e3173501f2ad04 Application_Form.rar c2 pakistanpower[.]org
#dailyphish targeting indonesia github[.]com/gorzhon99/2025-DGT
January 27, 2026 at 9:36 PM
#dailyphish targeting indonesia github[.]com/gorzhon99/2025-DGT
#dailyphish #crimeware . classic migration from o365 to zoho
January 23, 2026 at 3:23 PM
#dailyphish #crimeware . classic migration from o365 to zoho
January 22, 2026 at 3:43 PM
#susp "Defence Letter to Tata Advance systems.hta"
b9d8f497b0e30399a4abd05d3ed2a370
-> hostmysite[.]website
GenAI makes it easy for attackers (or pentesters), but at times, also for analysts
b9d8f497b0e30399a4abd05d3ed2a370
-> hostmysite[.]website
GenAI makes it easy for attackers (or pentesters), but at times, also for analysts
January 21, 2026 at 9:21 PM
#susp "Defence Letter to Tata Advance systems.hta"
b9d8f497b0e30399a4abd05d3ed2a370
-> hostmysite[.]website
GenAI makes it easy for attackers (or pentesters), but at times, also for analysts
b9d8f497b0e30399a4abd05d3ed2a370
-> hostmysite[.]website
GenAI makes it easy for attackers (or pentesters), but at times, also for analysts
interesting susp #apt targeting cambodia បញ្ជីគណៈអភិបាលរាជធានីខេត្ត.zip
40da65d73ccae6fa4eceea00bcb53674
-> via vt. The URI is "Windows Defender" if you skip every other letter. etherial.groover.workers[.]dev/exts/msiPlugin?keyCode=Wrienddnoewfse DD esfweonddneirW'
40da65d73ccae6fa4eceea00bcb53674
-> via vt. The URI is "Windows Defender" if you skip every other letter. etherial.groover.workers[.]dev/exts/msiPlugin?keyCode=Wrienddnoewfse DD esfweonddneirW'
January 21, 2026 at 6:19 PM
interesting susp #apt targeting cambodia បញ្ជីគណៈអភិបាលរាជធានីខេត្ត.zip
40da65d73ccae6fa4eceea00bcb53674
-> via vt. The URI is "Windows Defender" if you skip every other letter. etherial.groover.workers[.]dev/exts/msiPlugin?keyCode=Wrienddnoewfse DD esfweonddneirW'
40da65d73ccae6fa4eceea00bcb53674
-> via vt. The URI is "Windows Defender" if you skip every other letter. etherial.groover.workers[.]dev/exts/msiPlugin?keyCode=Wrienddnoewfse DD esfweonddneirW'
#apt SAKSHAM MISHRA.xlam 9deb96387b0e575bd2a8f3943fcf3ec6 -> workplacegov[.]online
workplacegov.online
January 20, 2026 at 7:27 PM
#apt SAKSHAM MISHRA.xlam 9deb96387b0e575bd2a8f3943fcf3ec6 -> workplacegov[.]online
January 20, 2026 at 7:22 PM
January 16, 2026 at 4:17 PM
#susp "14-1_Kinh tế Việt Nam trước ngưỡng phát triển quyết định.iso" ("14-1 Vietnam's economy is on the verge of a decisive development.iso")
ca12257b5aa9e60a337640f9d17b950a
ca12257b5aa9e60a337640f9d17b950a
January 14, 2026 at 2:45 PM
#susp "14-1_Kinh tế Việt Nam trước ngưỡng phát triển quyết định.iso" ("14-1 Vietnam's economy is on the verge of a decisive development.iso")
ca12257b5aa9e60a337640f9d17b950a
ca12257b5aa9e60a337640f9d17b950a
#apt #UNK_SweetSpecter 7c3ae2ffd7da1dd136e5f02c7d488dd7
January 8, 2026 at 5:20 PM
#apt #UNK_SweetSpecter 7c3ae2ffd7da1dd136e5f02c7d488dd7
interesting #dailyphish leveraging @figma.com for hosting a phish landing page
January 8, 2026 at 4:29 PM
interesting #dailyphish leveraging @figma.com for hosting a phish landing page
January 7, 2026 at 4:06 PM
January 6, 2026 at 3:32 PM