s2
--:--:--UTC

Searching APEX

Starting…

  1. Searching Threats, IOCs & Threat Intelligence locally
  2. Querying external providers
  3. Asking AI Forensic Validator
  4. Creating new entry from validated hit

0s elapsed

TF-MAL-py.quietboard

📛 Threat Title

Malware family: QUIETBOARD

Category: QUIETBOARD First seen: Last updated: Source: ThreatFox Malwares

Description

ThreatFox malware family `py.quietboard`. Printable name: QUIETBOARD.

Indicators of Compromise (1)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

domain py.quietboard VT: VT base fetch failed: HTTPError: 429 Too Many Requests for domains/py.quietboard

IOC database

Type
domain
Value
py.quietboard
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
Extracted from Threat TF-MAL-py.quietboard

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Too Many Requests for domains/py.quietboard

References (1)

Remediations (8)

  • web:malpedia.caad.fkie.fraunhofer.de

    Details for the QUIETBOARD malware family including references, samples and yara signatures.

  • web:www.bleepingcomputer.com

    The latest news about Quietboard Hackers push USB malware payloads via news, media hosting sites A financially motivated threat actor using USB devices for initial infection has been found abusing ...

  • web:www.breachsense.com

    Complete malware remediation now requires addressing both the infected endpoint and the stolen authentication data. Your malware incident response playbook must account for both.

  • web:www.cisa.gov

    It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.

  • web:www.cisa.gov

    This joint advisory is the result of a collaborative research effort by the cybersecurity authorities of five nations: Australia, Canada, New Zealand, the United Kingdom, and the United States.1 It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices.

  • web:www.cisa.gov

    The nature of malicious code, or malware , (e.g., viruses, worms, bots) shifted recently from disrupting service to actively seeking financial gain. In the past, worms were designed primarily to propagate. The impact on victims and organizations was primarily a disruption of service resulting in loss of productivity and sometimes a loss in revenue. Now, many of the significant worms are ...

  • web:www.hivepro.com

    Malware : EMPTYSPACE (also known as VETTA Loader and BrokerLoader), QUIETBOARD Attack: UNC4990, a financially motivated threat actor, has been observed targeting organizations in Italy by utilizing weaponized USB drives as an initial infection vector. Additionally, they are employing trusted websites such as Vimeo, GitHub, and Ars Technica to host encoded payloads disguised within seemingly ...

  • web:www.ncsc.gov.uk

    How to defend organisations against malware or ransomware attacks.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.