ANY.RUN is an interactive online malware sandbox that provides live access to analyze and track malware behavior in real-time.

ANY.RUN

ANY.RUN - Interactive Malware Analysis Service | 12,170 followers on LinkedIn. An innovative threat hunting tool for malware analysis and incident response. | ANY.RUN is an interactive online malware analysis service created for dynamic and static research of multiple types of cyber threats. 

One of the major competitive advantages of ANY.RUN is that the service is developed as an interactive analysis tool. The company aims to provide all the information by executing the task.

Ovanes Mikhaylov

Head of PR at ANY.RUN

Galina Zueva

Corporate Account Manager at ANY.RUN

Anna Lanskaya

IT-recruiter – ANY.RUN

Nataly Dubinina

ANY.RUN - Interactive Malware Analysis Service

3-2-1... Liftoff 🚀 🔥 We're excited to unveil Safebrowsing — a new tool from #ANYRUN that lets you safely explore suspicious links 🔍 Use a fully-interactive virtual browser, verify #URL content, and get threat notifications in real time ⚡️ Learn more and try it out 👉 https://lnkd.in/eUEBgEZz

⚠️ Find files related to the new zero-day vulnerability – #ExploreWithANYRUN ✅ We’ve added the detection for CVE-2024-43451, allowing our users to track and analyze this threat 📌 #CVE can be detected by inspecting the URL shortcut and checking for SMB connections 📂 The #URL file contains an [InternetShortcut] entry with a URL=file://..., linking to a payload that is downloaded via the SMB protocol which may come from the System process Execution chain: ZIP file ➡️ URL link ➡️ Payload from the server ➡️ Infection 💢 Runs even when only right-clicked 📍 Check the contents of the URL file to verify its destination 📝 Before the patch, this #vulnerability allowed #malicious payloads to be downloaded simply by opening a URL file. Be sure to update your system to stay protected! 👨💻 Take a look at the analysis: https://lnkd.in/eZuBHGgG 🔍 Find more sandbox sessions using this tag: https://lnkd.in/eaFe5Asm Analyze and investigate the latest #malware and #phishing threats with #ANYRUN 🛡️

Thanks for the valuable feedback 🚀 Be sure to read this post to learn how #ANYRUN can streamline your cybersecurity work ⬇️

🚀 ANYRUN sandbox now auto-detonates common attack chains, including via API Stages can include: ✉️ Email attachments and URLs 🔗 URLs and embeds in documents 📷 QR codes 📝 Rewritten links and multi-stage redirects 🗃️ Archived payloads Learn more ⬇️ https://lnkd.in/eQWKnUxh

🔔 Subscribe to threat updates in #TILookup ! Regularly receive notifications about fresh intel of your interest, quickly track changes in #IOCs , #IOAs , & #IOBs , and stay informed about evolving threats 👾 🚀 Streamline your work with #ANYRUN 🔗 https://lnkd.in/eFv9zaHs

🚀 In October, we significantly expanded our detection capabilities with new and updated signatures and #YARA rules, empowering you with even stronger threat coverage Subscribe to our newsletter now to gain valuable #cybersecurity insights and stay informed about the latest updates 👇

🎯 Major Turkish retail chains A101 and ŞOK are facing a massive phishing attack – #ExploreWithANYRUN ⚠️ As part of a prolonged and large-scale #phishing campaign, at least 45 domains targeting the 11/11 global sales event were created. Some of them contain four "1"s in the #domain name, others copy the names of online retailers 📍 The most domains were registered on 11/11 and 11/12, with 15 and 16 created on each day. The page code is #obfuscated with obfuscator[.]io The titles include phrases like ‘A101 HARCA HARCA’ (‘A101 SPEND SPEND’), 'Sadece Online Özel' (‘Online Exclusive Only’) along with popular brand names, devices, etc. 💰 In the final step, the phishing site asks for the card number, expiration date, and security code, giving the attackers access to the victim's funds ❗ Detection rates for these #phish sites are currently low with some security solutions, use #ANYRUN to safely check any suspicious links As part of CloudFront’s security measures, the official company website, hxxps://www.a101[.]com[.]tr, is inaccessible from a range of IP addresses Take a look at the analysis: https://lnkd.in/e97nhbFi 🔍 Find more sandbox sessions with phishing websites posing as legitimate businesses using our 'fakesite' tag: https://lnkd.in/edA77SJA 📝 Here is a list of known phishing domains associated with this campaign: sizleri-burada-karsilerken-mutlu-hissederiz[.]com sonfrstlrbgnx[.]xyz bufirsatlariseviyorum[.]online aktuelmarket[.]org[.]tr magazacilika1o1[.]net enxiyixidnrmxlrmxlxrm-x83x8394jxk[.]click kasimmininidirmligunleri[.]xyz efsanaindirimler[.]online devamli-gelistiren-sensin[.]com giresunsubeleri[.]com[.]tr parabittiya[.]org sizleri-burada-gormekten-hepimiz-mutluyuz[.]com kasimmininidirmligunlerikacmaz[.]xyz kasimmininidirmligunleri[.]online muhtesemkampanyahaftasi[.]xyz harikakampanyalarseninle[.]online harikakampanyalarseninle[.]xyz bizde-hergun-kampanya[.]shop kasimmininidirmligunler[.]online 11-11sefsretr-ezsxfdcg-txfgghg-rexdcgv-rxfcfg[.]com cebeyararfirsatlar[.]xyz ixndrmxlrmxbuxayxiki-937xcduoz826xh2[.]click sevde-gel-planlari-yaparak-gidelim[.]com harikasongunler[.]xyz bizde-heray-kampanya[.]shop enuygunalisverisler[.]online bizde-heraykampanya[.]shop guncelsitequantum57zlmqv[.]click bizde-her-ay-kampanya[.]shop harikasongunler[.]online 11-11-asfgjaf-asjhfha-basha-asjkhb[.]com fabrikadanhalkakampanya[.]net[.]tr sokindirimler-sokcepte[.]com enucuzmarket[.]online kasimmininidirmlerinikacirmayin[.]online sokaktuelurunlercepte[.]com bizde-her-haftakampanya[.]shop guncelsiteportal6kxz9vpq[.]click kasimmininidirmlerini[.]online kasiminknmpanyasini[.]xyz guncelsitenova9lzq3mxp[.]click Analyze #malware and phishing attacks with #ANYRUN 🛡

👾 #HawkEye is a #keylogger with extensive #stealer capabilities that has been used for over a decade See detailed technical analysis of this #malware and its kill chain from Aaron Jornet Sales and collect #IOCs 👨💻 🔗 https://lnkd.in/eT2NngAK

Phishing activity in the past 7 days 🐟 🔍 Track latest #phishing threats in #TILookup 🔗 https://lnkd.in/eQE62Cuu

🔍 Recently, we held a webinar on collecting threat intelligence with #TILookup Read a recap featuring real-world examples of how to find threats with mutexes, IPs, & file paths and get fresh #AgentTesla samples with #YARA Search ⁠🔗 https://lnkd.in/e9nXeGZC

ANY

RUN:ANY

ANY.RUN