Swiss Post CERT (@SwissPost_CERT) header
Swiss Post CERT (@SwissPost_CERT) profile picture

Swiss Post CERT

@SwissPost_CERT

CERT-Team @swisspost / @postschweiz Cyber Defence for https://nitter.cf/t.co/Gms0UHyfsV / AS12511 FIRST member @FIRSTdotOrg #Phishing #Malware #Hacking #ITsecurity #DFIR

 Bern, Switzerland
post.ch/csirt
Joined December 2019
  • Tweets24
  • Following49
  • Followers269
1Media
Photo by Swiss Post CERT (@SwissPost_CERT)
Thanks Corsin .@cocaman & Andre .@AndreGironda for great sharing on @abuse_ch Bazaar, ThreatFox & URLhaus! This is a rather interesting #AsyncRAT campaign. Spoofing @swisspost & @USPS as sender CC: @SwissPost_CERT & @OIGUSPS 🧵 1/ #MalwareChallenge
Image from TomU | I'm still here... til the end 🕊️🇨🇭 (@c_APT_ure)
Image from TomU | I'm still here... til the end 🕊️🇨🇭 (@c_APT_ure)
1
7
1
11
Be aware of current patterns of fraud: Swiss Post does not process payments via post[.]ch[.]paysget[.]info. Find out more ⬇️ post.ch/en/pages/footer/curr…
2
1
Swiss Post CERT retweeted
abuse.ch (@abuse_ch) profile picture
abuse.ch
@abuse_ch26 Oct 2020
abuse.ch: Time to move forward. Your help is needed ⛑️ 👉 abuse.ch/blog/moving-forward…
Image from abuse.ch (@abuse_ch)
18
253
55
312
Swiss Post CERT retweeted
smtnk (@s_metanka) profile picture
smtnk@s_metanka25 Jun 2020
New blog: This year the cybercrime group #RoamingMantis has been actively targeting the European users of both #iOS and #Android devices. This post provides an insight into the rate of success in their recent advancements. medium.com/csis-techblog/the… #Malware #Phishing @csis_cyber
The RoamingMantis Group’s Expansion to European Apple Accounts and Android Devices

The RoamingMantis Group’s Expansion to European Apple Accounts and Android Devices

Background

medium.com
2
19
2
41
Swiss Post CERT retweeted
にのせき (@ninoseki) profile picture
にのせき@ninoseki2 Jul 2020
I believe #RoamingMantis is a name of a campaign (which is named by Kaspersky GReAT). It is not a group. But recently I saw some reports which use #RoamingMantis as a name of a group. e.g. cybereason.com/blog/fakespy-… (by @cybereason) medium.com/csis-techblog/the… (by @CyberCSIS)
4
5
1
14
Swiss Post CERT retweeted
Virus Bulletin (@virusbtn) profile picture
Virus Bulletin@virusbtn26 Jun 2020
CSIS researcher (and past VB conference speaker) @s_metanka looked at how the RoamingMantis Android malware is now targeting European countries too and how the same group is engaging in Apple ID phishing medium.com/csis-techblog/the…
Image from Virus Bulletin (@virusbtn)
4
3
cybercrimepolice: "Angebliche Paketlieferung mit Code per SMS freischalten" cybercrimepolice.ch/de/fall/… #phishing #betrug
2
1
Betrüger geben sich als @postschweiz aus und versuchen Spionage App zu verteilen… bit.ly/2WKvuyL #sicherheit #malware #phishing #malware
Image from INSTITUT TREUHAND 4.0 (@treuhand40)
2
1
5
Replying to @midnight_comms
Thanks for the heads-up! I will take this up with @SwissPost_CERT We've been seeing an uptick of #FakeSpy Android Malware recently.
1
1
1
Swiss Post CERT retweeted
GovCERT.ch (@GovCERT_CH) profile picture
GovCERT.ch@GovCERT_CH12 May 2020
Vorsicht vor gefälschten E-Mails im Namen der Eidgenössischen Steuerverwaltung ESTV: Beim Excel Anhang handelt es sich um Schadsoftware #guloader. Nicht öffnen!
Image from GovCERT.ch (@GovCERT_CH)
Image from GovCERT.ch (@GovCERT_CH)
3
56
2
35
New wave of Post phishing emails, with the old ‚pay for your parcel‘ lure Don‘t put in your CC details! hosted on free2[.]it/public/ch @SwissPost_CERT #scam
Image from candid wueest 🇨🇭 (@mylaocoon)
Image from candid wueest 🇨🇭 (@mylaocoon)
Image from candid wueest 🇨🇭 (@mylaocoon)
6
5
Swiss Post CERT retweeted
GovCERT.ch (@GovCERT_CH) profile picture
GovCERT.ch@GovCERT_CH30 Apr 2020
Vorsicht vor betrügerischen Anrufen 📞⚠️
Image from GovCERT.ch (@GovCERT_CH)
1
61
4
62
Swiss Post CERT retweeted
abuse.ch (@abuse_ch) profile picture
abuse.ch
@abuse_ch28 Apr 2020
Swiss post themed malspam campaign distributing #Parallax RAT in Switzerland 🇨🇭 XLS: bazaar.abuse.ch/sample/dcc33… EXE: bazaar.abuse.ch/sample/4723a… URL: urlhaus.abuse.ch/url/353122/ Parallax RAT C2: bhg.canadacentralregistrar\.ca (79.134.225.51) Hosted at AnMaXX: abuse.ch/blog/anmaxx-gerber-…
MalwareBazaar - Post.ch.980056030002148543.xls (ParallaxRAT)

MalwareBazaar - Post.ch.980056030002148543.xls (ParallaxRAT)

Post.ch.980056030002148543.xls has been detected as ParallaxRAT by MalwareBazaar

bazaar.abuse.ch
1
5
13
Swiss Post CERT retweeted
CERT-EU (@CERTEU) profile picture
CERT-EU@CERTEU21 Apr 2020
📢The 2020 Q1 TLP:WHITE executive summary of our Threat Landscape Report is out! 📝You'll find an overview of direct #cyber threats to 🇪🇺 institutions, bodies & agencies + insights into TTPs & the specific sectorial, geographical threat landscape📈. ➡️media.cert.europa.eu/static/…
28
1
34
Load more