Hack Forums
Uncovering a Palestinian & French Stealer Campaign Against Israeli Citizens - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Blackhat Training (https://hackforums.net/forumdisplay.php?fid=405)
+----- Forum: Reverse Engineering (https://hackforums.net/forumdisplay.php?fid=229)
+----- Thread: Uncovering a Palestinian & French Stealer Campaign Against Israeli Citizens (/showthread.php?tid=6256563)



Uncovering a Palestinian & French Stealer Campaign Against Israeli Citizens - resetti - Nov 17, 2023

Recently I came across some malware on Telegram, the file was released with the caption: “i will be using my private stealer for #opisrael, message me to help it spread”. This blog shows the world of Stealer-as-a-Service markets, and political hacktivism within Telegram against Israel, and some deep analysis of a very noisy piece of malware!

If you're interested in reading. Here is the link: https://0xresetti.github.io/palestine-france-stealer-campaign.html

I also have some other posts if you're interested, but this is my most recent one and I thought id share it with you guys.


RE: Uncovering a Palestinian & French Stealer Campaign - Sofiya1a - Nov 17, 2023

thank you friend for this post


RE: Uncovering a Palestinian & French Stealer Campaign Against Israeli Citizens - Tentco - Nov 17, 2023

(Nov 17, 2023 02:44 AM)resetti Wrote:  Recently I came across some malware on Telegram, the file was released with the caption: “i will be using my private stealer for #opisrael, message me to help it spread”. This blog shows the world of Stealer-as-a-Service markets, and political hacktivism within Telegram against Israel, and some deep analysis of a very noisy piece of malware!

If you're interested in reading. Here is the link: https://0xresetti.github.io/palestine-france-stealer-campaign.html

I also have some other posts if you're interested, but this is my most recent one and I thought id share it with you guys.

There are tons of like these open-sourced on github what's funny is that they haven't used any sort of obfuscation(considering the dropper is in node-js) neither packing through nexe or NSIS the screenshot method of dropping .ps1 is generic too, I would like you to send me the sample through convo, I would like to release one analysis of my own here.
Great analysis.
Thanks.


RE: Uncovering a Palestinian & French Stealer Campaign Against Israeli Citizens - Mnemonic - Nov 17, 2023

Very interesting share and I found the site content to be entertaining as well.


RE: Uncovering a Palestinian & French Stealer Campaign Against Israeli Citizens - resetti - Nov 20, 2023

(Nov 17, 2023 08:33 AM)Tentco Wrote:  There are tons of like these open-sourced on github what's funny is that they haven't used any sort of obfuscation(considering the dropper is in node-js) neither packing through nexe or NSIS the screenshot method of dropping .ps1 is generic too, I would like you to send me the sample through convo, I would like to release one analysis of my own here.
Great analysis.
Thanks.

Sure, PM me on telegram: https://t.me/fuckaslr


RE: Uncovering a Palestinian & French Stealer Campaign Against Israeli Citizens - Tentco - Nov 20, 2023

(Nov 20, 2023 07:26 AM)resetti Wrote:  Sure, PM me on telegram: https://t.me/fuckaslr

Can you send me the link in HF's convo?
I am not active on telegram yet.


RE: Uncovering a Palestinian & French Stealer Campaign Against Israeli Citizens - Puppetmaster - Dec 25, 2023

use jabber instead of using telegram


RE: Uncovering a Palestinian & French Stealer Campaign Against Israeli Citizens - resetti - Dec 25, 2023

(Dec 25, 2023 08:29 AM)Puppetmaster Wrote:  use jabber instead of using telegram

I use both.


RE: Uncovering a Palestinian & French Stealer Campaign Against Israeli Citizens - Azeta - Nov 25, 2024

Interesting post. Would have to look into it.