did a a writeup about the ClearFake/ClickFix + Etherhide campaign. Leads to Lumma/LummaC2.

Tracking updated domains, details in the write-up 🚀

www.atea.no/siste-nytt/i...

We started sharing information on CVE-2023-35082 vulnerable Ivanti EPMM (formerly MobileIron Core) instances. 1376 vulnerable unique IPs found 2023-08-07. Advisory: https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older