my last words cnn.com/2022/03/30/politics/… ! See you all after our victory! Glory to Ukraine!
for now stern/deamon - try to hide himeself, changing nicknames, wants to make some voice calls :) reshaev/cyberganster - in total panic. tramp - doing somethings unknown! We know everything about you Conti, go to panic, you can even trust your gf , we against you!
and funny , you should separate accounts what conti/trick paid to workers , and what they got from ransom. they still have them on btc, and transfer only for their expense. try to monitor their wallets! that they doesnt have possibility to cashout!
also you should have normal translation from hackers slang to english, then you will have more data to make analysis! there are a lot of between lines
about pony data back them 2016, there are information when source code of dyre was shared through yandex disk. they infected themselves, and there are their data! try to do analytics job and investigate that!
i'm happy that security researchers united and investigate of logs! that is real work not just like "selling incompatible products to make money"
Доброго ранку, МИ З УКРАЇНИ! to recorderfuture - i'm not affiliate of conti, i'm just boring security researcher .
emotet
ФИНАЛЬНАЯ СХЕМА СЕРВЕРА 82.202.192.66
https:\nssh ->
front-1:443 -> frontB:443 -> backend:443
ssh->185.9.18.154:443 ->91.193.180.23:443->82.202.192.66\n
http:\nnginx -> front-2:80 -> frontB:443 -> backend:443
ssh->188.241.120.42:80->91.193.180.23:443->82.202.192.66"