Germán Fernández on Twitter: "🔺 New sample of #ExMatter (.NET/Confuser/64-bit) exfiltration tool commonly associated with #BlackCat, the binary connects to IP 64.227.80.81 AS14061 DIGITALOCEAN-ASN (as usual :D) port 22. PDB: "Z:\vm1\sync\sync\sync\bin\Debug\Confused\sync_enc.pdb" + They added the… https://t.co/A1YEE3vo8o" / Twitter
https://twitter.com/i/web/status/1655014346307559428