iiinova — where your digital self keeps evolving

World Watch OCD @ocdworldwatch.bsky.social · 05/05/2026

🧵 Since March 2026, Orange Cyberdefense has been tracking a malware delivery cluster linking a fake FileZilla campaign with other software-themed lures, including LibreOffice and Google Drive Setup, as well as a ClickFix-based one. #CTI #ThreatIntel #STXRAT @asmalansari.bsky.social

Scheme showing overlaps between payloads and infrastructure elements.

122

World Watch OCD @ocdworldwatch.bsky.social · 23/09/2025

🎣🧀 Since early September 2025, the Orange Cyberdefense CSIRT and CyberSOC teams have detected phishing campaigns impersonating Meta, AppSheet and Paypal, leading to malware delivery. Our team tracks this activity under the alias "Metappenzeller". #CTI #ThreatIntel #Metappenzeller #phishing

101

World Watch OCD @ocdworldwatch.bsky.social · 03/07/2025

🧀 Update on MintsLoader: a thread 🔽 MintsLoader is a JavaScript/PowerShell loader that was first detailed by OCD in 2024. A new version has been around at least since early-June 2025. #threatintel #cti #mintsloader

124

World Watch OCD @ocdworldwatch.bsky.social · 20/02/2025

🆕We publish today the result of a deep-dive investigation into a malicious campaign leveraging #ShadowPad and #PlugX to distribute a previously-undocumented ransomware, dubbed #NailaoLocker. This campaign targeted 🇪🇺 organizations during S2 2024 and is tied to Chinese TA 🇨🇳.

110

World Watch OCD @ocdworldwatch.bsky.social · 05/12/2024

While monitoring recent #Emmenhtal iterations, we observed a distinct politically-aligned cluster 🇪🇺, strongly differing from usual financially motivated Emmenhtal distribs. This cluster drops another malware we dubbed #Edam Dropper🧀 github.com/cert-orangec... Targets: European #energy sector🔋

github.com

GitHub - cert-orangecyberdefense/edam: Edam dropper

Edam dropper. Contribute to cert-orangecyberdefense/edam development by creating an account on GitHub.

120

World Watch OCD @ocdworldwatch.bsky.social · 25/11/2024

📍For more than 8 months, our threat researchers from OCD have worked on mapping China's civil-military–industrial complex when it comes to #cyberespionage operations. ⛯ Consult our newly published deep-dive report and interactive map here: research.cert.orangecyberdefense.com/hidden-netwo...

research.cert.orangecyberdefense.com

Orange Cyberdefense CERT Threat Research: The hidden network map

052