■■■□□ Interesting thread: checkPoint research: [CyberCrime Updates] After being allegedly dead, #phorpiex is back with a new “Twizt” module that makes it a peer-to-peer botnet. Including a crypto-clipper for 36 wallets, uses a binary protocol with RC4 and RSA over 48755 port, and port mapping on home router using UPnP.
https://twitter.com/_CPResearch_/status/1447852018794643457
https://t.me/cKure/9734