⚠️ ToxicPanda: a new banking trojan from Asia has hit Europe and Latin America

You can see the geographic distribution of victims in the attached image.

I discovered this malicious activity a few days ago, and after conducting research, I submitted the C2 servers to OpenBLD.net.

I hope this threat hasn’t affected anyone, but if it has, let’s hope the C2 servers will be blocked.

Technical analysis:

- https://www.cleafy.com/cleafy-labs/toxicpanda-a-new-banking-trojan-from-asia-hit-europe-and-latam

Take care ✌️

🏎 OpenBLD.net – Engine for a Faster Internet

Increased throughput with the newest Gears in the racing engine of OpenBLD.net. Some Gears have been rewritten or built from scratch:

• Synchronous processing of block lists
• Caching of blocking events
• Updated caching system — the log enricher now has its own cache
• Enhanced request processing system
• New health-checking system for upstream servers, with response time detection
• Improved load balancing, routing requests to servers with the lowest response time
• Optimized parallel DNS request handling, delivering the fastest response

I hope these features will help us save valuable time online while the OpenBLD.net system's gears run smoothly under the hood.

What's Gears?

Gears are the components of the OpenBLD.net system that help to customize online experiences.

If you notice any “engine misfires,” please let me know. I’m always open to constructive feedback.

Wishing everyone a safe journey across the internet! ✌️

Evil CAPTCHA attacks DeceptionAds, stealer delivery via ad network. Over a million impressions, over several thousand sites.

Here's why advertising can be harmful.

Malicious domains sent to the OpenBLD.net ecosystem

https://t.me/sysadm_in_channel/5281

New I2PRAT communicates via anonymous peer-to-peer network

Phishing link was blocked in OpenBLD.net

Technical analysys:

https://www.gdatasoftware.com/blog/2024/12/38093-ip2rat-malware

OpenBLD.net — теперь и на Казахском языке! 🇰🇿

OpenBLD.net проект, сделанный в Казахстане, теперь доступен для казахоязычных пользователей! Отныне можно смело заявлять о своем авторстве — сайт и документация переведены на государственный язык нашей страны.

Что уже доступно:

- Полная документация
- Основные страницы сайта

Благодарю за поддержку и помощь в переводе CEO компании Edk-it.com Алмаза Элеманова.

Приглашаю вас познакомиться с OpenBLD.net на казахском языке:

🌐 https://openbld.net/kz/

Сохраняя нашу национальную идентичность 🇰🇿 , мы делаем технологии ближе для каждого. Всем мир ✌️

🇵🇱 OpenBLD.net - Now in Poland (Warsaw)

Continuing the great tradition of collaboration with cloud and hosting providers, the cloud provider 3hcloud.kz has provided a server in Poland.

Now, countries closest to Poland and Poland itself will be served by the new server, offering the shortest route and response time for that region.

It is important to remember – only together, and each individually, can we secure ourselves and our loved ones.

How to set up OpenBLD.net:

- https://openbld.net/docs/category/get-started/

Take care. Peace! ✌️