Spectra Analyze in Action: Retrohunting Bots
ID: 44a8b9c7-a95c-55ca-8719-e6f861daaab1
STIX ID: report--44a8b9c7-a95c-55ca-8719-e6f861daaab1
Feed Name: ReversingLabs Blog
Threat Score
This report explains how threat actors use Telegram bots as a lightweight C2 for credential-harvesting and infostealer campaigns, and demonstrates a retrohunting workflow (regex/YARA) plus static and dynamic analysis steps to locate Telegram bot tokens, phishing pages, and related IOCs for detection and threat hunting.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.