AhnLab Security Emergency Response Center (ASEC) @AhnLab_ASEC
#AhnLab #ASEC AhnLab ASEC ahnlab.com South Korea Joined June 2020-
Tweets113
-
Followers374
-
Following27
-
Likes0
Kimsuky Group Using Meterpreter to Attack Web Servers | ASEC has recently discovered the distribution of malware targeting web servers by Kimsuky group; a threat group deemed supported by North Korea. asec.ahnlab.com/en/53046/ @AhnLab_ASEC
#Trigona #Ransomware Attacking MS-SQL Servers. Typical attacks that target MS-SQL servers include brute force attacks and dictionary attacks on systems where account credentials are poorly managed. asec.ahnlab.com/en/51343/
#Kimsuky Uses Alternate Data Stream (ADS) to Conceal Malware. asec.ahnlab.com/en/50625/
#AhnLab #MDS detects and blocks malicious #IcedID ms-office word file that uses anti-sandbox techniques. asec.ahnlab.com/en/50198/ 👍AhnLab MDS global.ahnlab.com/site/product/p…
#Nevada #Ransomware is being distributed. b673d92b77489d12779dc1fb5e8f6fdd ".NEVADA" extension 1. Main Features of Nevada Ransomware 2. Nevada Encryption Targets and Exception Conditions asec.ahnlab.com/en/50063/
ASEC has recently discovered the #ShellBot, also known as #PerlBot, malware being installed on poorly managed Linux SSH servers. If ShellBot is installed, Linux servers can be used as DDoS Bots for DDoS attacks against specific targets. asec.ahnlab.com/en/49769/
ASEC discovered a malware strain disguised as a password file and being distributed alongside a normal file within a compressed file. The recently discovered malware was in #CHM and #LNK file formats. asec.ahnlab.com/en/49760/
📝AhnLab Threat Intelligence Report A comprehensive report on monitoring the activities of Kimsuky (FlowerPower, AppleSeed) in 2022 asec.ahnlab.com/wp-content/upl… asec.ahnlab.com/en/49520/
📝AhnLab Threat Intelligence Report Unique characteristics of Kimsuky group’s spear phishing emails. Kimsuky used FQDN disguised as a famous Korean web portal. asec.ahnlab.com/wp-content/upl… asec.ahnlab.com/en/49507/ #AhnLab #Kimsuky #Anlaysis #Thallium
📝AhnLab Threat Intelligence Report Threat Trend Report on Region-Specific Ransomware - Localized Ransomware Attacks - Case Study: South Korea, Taiwan, China, Chile asec.ahnlab.com/wp-content/upl… asec.ahnlab.com/en/49515/ #AhnLab #Ransomware #Anlaysis
#Mallox #ransomware, which targets vulnerable MS-SQL servers, has been historically distributed at a consistently high rate. Mallox disguised as a program related to DirectPlay is a file built in .NET file. 📝Analysis: asec.ahnlab.com/en/49366/
AhnLab Security Emergency response Center (ASEC) has recently discovered #CHM malware which is assumed to have been created by #Kimsuky. It is distributed as an email attachment. IOC: 726af41024d06df195784ae88f2849e4 C2: hxxp://mpevalr.ria[.]monster asec.ahnlab.com/en/49295/
❗MS-SQL Attack The attacker used not only #CobaltStrike but also #Netcat to gain control over the infected system. It targets poorly managed MS-SQL servers. Various other malware were also installed like privilege escalator, infostealer, and proxy tools. asec.ahnlab.com/en/49249/
According to ASEC the North Korea-linked Lazarus Group has been observed weaponizing flaws in an undisclosed software to breach a financial business entity in South Korea twice within a span of a year. thehackernews.com/2023/03/lazaru… @TheHackersNews
#iswr #ransomware can be decrypted!!! iswr ransomware is a variant of #STOP ransomware. #AhnLab #ASEC offers a free script for decrypting files infected by iswr ransomware. 😆asec.ahnlab.com/en/48989/
CHM Malicious File Disguised as Security Email from a Korean Financial Company #RedEyes #Scarcruft asec.ahnlab.com/en/49089/
ASEC has recently discovered the installation of the #PlugX #malware through the Chinese remote control programs #Sunlogin and #Awesun’s remote code execution #vulnerability asec.ahnlab.com/en/49097/
#Lazarus exploited a zero-day #vulnerability in Korea’s widely used digital signature authentication software. They attacked Korean defense contractors, satellite companies, IT, and media companies. #0day This report will be translated into English soon. asec.ahnlab.com/ko/48416/
Anti-Forensic Techniques Used By #Lazarus Group - Data Hiding: Encryption, Other Forms of Data Hiding - Artifact Wiping: File Wiping - Trail Obfuscation: Timestamp Changes 📝Analysis by #AhnLab #ASEC #AFIRST asec.ahnlab.com/en/48223/
#Magniber #Ransomware’s Relaunch Technique using Windows Registry 🤐 Registering to be relaunched is a preliminary phase of encryption. asec.ahnlab.com/en/48312/
Icewesel @icewesel
6 Followers 276 Following
C:\hristian Mehlmauer @firefart
3K Followers 3K Following I hacked the planet - opinions are my own - Mastodon: https://t.co/FTAelGh7DO
Rosendo V Quinones @RossVQuin1ones
25 Followers 705 Following
badhombre @cortafuego11
13 Followers 345 Following
freakyclown @_Freakyclown_
17K Followers 3K Following Co-Founder of @CygentaHQ former head of cyber research @Raytheon - Keynote Speaker, ethical hacker and physical security specialist. Author of How I Rob Banks.
Yong Rhee @YongRheeMSFT
698 Followers 656 Following The tweets are my own, not my employer sponsored.
cyberresponder @Malwarenailed
267 Followers 3K Following tweets and opinions are my own. dfir/threat hunting/malware research
L², PhD @L_Lgde
676 Followers 3K Following DFIR, Malware & CTI. Head of a CSIRT. Ex @ANSSI_FR. PhD in intl law. Mostly working on Chinese #APT but also on russian and cybercrime actors #CTI #Malware
Ranjeet Mewada @ranjeetmewada
221 Followers 1K Following Information Security Consultant #OSCP #RedTeam #CRTE
Justin @BitDissonance
0 Followers 148 Following
Is Now on VT! @Now_on_VT
4K Followers 802 Following Stay ahead of cyber threats. Get real-time alerts on notable APT/FIN/ORB indicators from VirusTotal. A threat intel project by @craiu.
Pratyush P @pratyushp99
0 Followers 346 Following A chubby and bubbly ENFP | Your next door Cyber Guy | Pursues Cyber security for brain and literature for heart | A human golden retriever
alescev @alescev
147 Followers 2K Following
Elena Odier @ElenaOdier
55 Followers 321 Following
Yujin Park @yujiny525
3 Followers 40 Following 24~ AhnLab Blockchain Company PM / 22~23 ICP HUB Korea MKT
Brian Zapata @theS3r4ph1m
67 Followers 592 Following InfoSec operations wannabe Detection Engineering | Threat Intel | Threat Hunting | IR | OSINT I'm trying to learn from everyone and from everything
Roni @roniyo07
1 Followers 43 Following
Villata Huo @VillataH42330
23 Followers 204 Following
Kanan ALASGARLI 🛡 @hawker0ne
79 Followers 735 Following Cyber Security ( Analyst , Engineer , Specialist )
Darren Webb ☠🕷 @spyd3r
1K Followers 7K Following Computational demonologist. The following tweets are classified SECRET GOLD JULY BOOJUM. 101 824 5150
ROSENDOVQUINONES1774 @IndoorQual43498
244 Followers 6K Following
jimi @twin_jimi
7 Followers 188 Following
joeychen @joeychennoGG
125 Followers 274 Following malware researcher, reverse engineer. A conference speaker and trainer such as HITB, VirusBulltin, CodeBlue, HITCON, DeepIntel, etc.
平成 aRT 🤖ॐ @k1llclu7ch
144 Followers 2K Following 🌐Aequᾶm memeηto rebus in arduis servare mentem Tech Developer | cyber geek guy | systems €n6!n33Я #developer
Jaesang Oh @jaeoh91
9 Followers 86 Following 🇰🇷 | Computer Science @ Georgia Tech | Interested in Cybersecurity, Threat Intelligence, Tech Policy
North America @north_amer38648
0 Followers 34 Following
Yahya Alsify @YahyaAlsify20
94 Followers 856 Following Malware Researcher | Reverse Engineer | Internals lover | 🇪🇬🇵🇸
Việt Do @viet_do47229
2 Followers 96 Following
vrahacks @vrahacks45077
0 Followers 50 Following
Dan @arat_irigat
2 Followers 82 Following
Aziz Farghly ☠ ∞ @FarghlyMal
911 Followers 801 Following Threat Researcher @nextronsystems (The thoughts and content I share are personal and not representative of my employer.)
Mr’Bot @ntbot11
2 Followers 229 Following
raven @raven04969
8 Followers 98 Following
CJ @Kuhai9801
2 Followers 176 Following
OliverOnTour @OliverOnTour
1 Followers 239 Following
spider @LulleLullu63135
139 Followers 3K Following
Jamz Yaneza @JamzYaneza
470 Followers 1K Following Threat Researcher ; Technology blogger ; Console/handheld/PC gamer ; Mobile veteran ; Personal opinions
AVAR Asia @avar_asia
333 Followers 282 Following We are an industry led, not-for-profit community platform for #cybersecurity researchers and practitioners.
SANS Institute @SANSInstitute
192K Followers 416 Following SANS is the most trusted and by far the largest source for information & cyber security training, certification and research in the world.
Black Hat @BlackHatEvents
421K Followers 2K Following The World's Premier Technical Cybersecurity Conference Series
ANY.RUN @anyrun_app
30K Followers 192 Following Empowering businesses with proactive security solutions: Interactive Sandbox, TI Lookup and Feeds. Sign up: https://t.co/8hIX0Qh5ME
Microsoft Threat Inte... @MsftSecIntel
187K Followers 1K Following We are Microsoft's global network of security experts. Follow for security research and threat intelligence.
NSA Cyber @NSACyber
150K Followers 12 Following We protect our nation’s most sensitive systems against cyber threats. Likes, retweets, and follows ≠ endorsement.
Unit 42 @Unit42_Intel
64K Followers 82 Following The latest research and news from Unit 42, the Palo Alto Networks (@paloaltontwks) Threat Intelligence and Security Consulting Team covering incident response.
Cybersecurity and Inf... @CISAgov
309K Followers 100 Following Official communications from CISA on X will always originate from this account. No other accounts are authorized to convey info from CISA or senior CISA staff.
Trend Micro @TrendMicro
113K Followers 4K Following We're a global leader in cybersecurity that helps make the world safe for exchanging digital information.
Sophos @Sophos
37K Followers 441 Following Defeat Cyberattacks ➡️ Check out our threat research @SophosXOps ➡️ Get Sophos product help @SophosSupport ➡️ Hear our channel insights @SophosPartners
Mandiant (part of Goo... @Mandiant
127K Followers 4K Following We’re determined to make organizations secure against cyber threats and confident in their readiness.
SANS Cyber Defense �... @SANSDefense
37K Followers 506 Following Home of the Cyber Defense curriculum of @SANSInstitute, a hub for #CyberDefense, #BlueTeam, and #OSINT info, training, media, community, and events.
Red Canary, a Zscaler... @redcanary
30K Followers 1K Following 24/7/365 threat detection and response across your cloud, identity, endpoints and everything in-between. We got you: https://t.co/pFNwBJN3d5
CyberKnow @Cyberknow20
36K Followers 3K Following Situational Awareness | Threat Intelligence | cybertracker | Hacktivism | Meme Farmer Digital Owl of the Cyber Realm Posts and Opinions are my own
780th Military Intell... @780thC
34K Followers 568 Following Official Twitter page of the 780th MI Brigade (Cyber). The Army's only offensive cyberspace operations brigade (following, retweets and links ≠ endorsement).
Snort 🐷 @snort
23K Followers 12 Following SNORT®: The standard in IDS and IPS. Download Snort 3 today! https://t.co/0Aycqy2PqJ
AV-Comparatives @AV_Comparatives
7K Followers 473 Following AV-Comparatives is an Austrian Organization, which is providing independent Anti-Virus software tests free to the public.
SANS DFIR @sansforensics
109K Followers 98 Following The world's leading Digital Forensics and Incident Response provider. This feed updates you on latest DFIR news, events, and training.
OWASP® Foundation @owasp
213K Followers 532 Following We improve the security of apps with community-led open source projects, 260 local chapters, and tens of thousands of members worldwide. Famous for OWASP Top 10
ATT&CK @MITREattack
113K Followers 521 Following MITRE ATT&CK® - A knowledge base for describing the behavior of adversaries. Replying/Following/Re-tweeting ≠ endorsement. @ https://t.co/wt46ArkZVt
Virus Bulletin @virusbtn
60K Followers 1K Following Security information portal, testing and certification body. Organisers of the annual Virus Bulletin conference. @[email protected]
INTERPOL_Cyber @INTERPOL_Cyber
115K Followers 346 Following INTERPOL Global Cybercrime Programme aims to reduce the global impact of cybercrime and protect communities for a safer world.
AV-TEST @avtestorg
13K Followers 1K Following IT Security & Malware Research. Legal Notice & Data Privacy Policy: https://t.co/2tqAdgBB9X
AhnLab Blockchain Com... @AhnLab_ABC
6K Followers 53 Following Empower your Web3 experience with our safe and secure wallet solution.
AhnLab Security Infor... @AhnLab_SecuInfo
3K Followers 601 Following 최고의 사이버 위협 전문가들로 구성된 ASEC(AhnLab SEcurity intelligence Center)은 국내 기업과 기관을 노리는 위협에 대해 정교한 분석과 최상의 대응 역량을 제공합니다.Trends for United States
You might like
