Caught up on some blog posts with #pcap files, malware samples and further info. https://www.malware-traffic-analysis.net/2026/index.html
Remote
Brad
@malware_traffic@infosec.exchange
mastodon 4.8.0-alpha.3+glitchSharing information on malicious network traffic and malware samples.
3588 Followers
46 Following
8 Posts
Joined October 28, 2022
2026-09-21 (Monday): IOCs for #SmartApeSG #ClickFix activity pushing #CNCMachineRMS RAT:
https://github.com/malware-traffic/indicators/blob/main/2026-09-21-IOCs-for-SmartApeSG-ClickFix-activity.txt
When I checked my GitHub project, I saw that I hadn't posted anything to it since February 2026, so now's as good a time as any to put something new into it!
2026-08-10 (Monday) Lumma Stealer or variant
A #pcap of the infection and the associated malware samples are available at https://www.malware-traffic-analysis.net/2026/08/10/index.html
My coworkers and I have been talking about the new "Seems like AI Slop" reporting feature for content on LinkedIn.
https://www.linkedin.com/posts/hsrinivasan1_ai-slop-is-a-top-priority-for-all-of-us-share-7488612006321889282-Ps8Z/
But laziness and greed drive slop, whether it's AI or not. I think people forget that social media was filled with human slop long before we ever had AI.
2026-04-06 (Monday): #ClickFix activity from the #SmartApeSG campaign. Not sure what malware was sent through the fake CAPTCHA page is this time, but it's not the usual.
A list of indicators, a #pcap of the traffic, malware samples and other files/info are available at https://malware-traffic-analysis.net/2026/04/06/index.html
2026-05-08 (Friday): #macOS #ShubStealer infection
#pcap, malware files, and indicators available at https://malware-traffic-analysis.net/2026/05/08/index.html
Different file hashes and C2 server than the Shub Stealer I saw yesterday, but otherwise pretty much the same.
Pink Floyd's album cover for Dark Side of the Moon shows light being split by a prism.
The Apple animated album art shows a pyramid instead of a the shape I normally associated with a prism.
I realize that some of the poster/sticker art associated with the album has pyramids, but that's not what I associate with a prism.
Excuse me while I go outside and yell at kids to stay off my lawn.
2026-08-09 - Traffic analysis exercise - First to Last
You get a #pcap and are asked to identify an infected Windows host.
Join the fun at https://www.malware-traffic-analysis.net/2026/08/09/index.html