Ahmet Payaslıoğlu @Computeus7

Incident Responder | Threat Hunter 127.0.0.1 Joined August 2018

Tweets

2K
Followers

498
Following

893
Likes

8K

Smukx.E @5mukx

a week ago

Creating a C2 infrastructure on AWS lorenzomeacci.com/creating-a-c2-…

7 89 449 43K 286

Download Image

A few weeks ago, I was responding to a cybersecurity incident - $500,000 have been stolen from a #blockchain developer. The infected operating system was freshly installed, and the victim was vigilant about cybersecurity. How could this happen? New supply chain attack? [1/6]

20 170 623 122K 375

Marci Ujlaki @UjlakiMarci

2 months ago

🟥 CVE-2025-53770, CVSS: 9.8 (#Critical) Microsoft SharePoint Server, on-prem New vulnerability identified, allowing unauthorized code execution via deserialization of untrusted data. 🚨 Exploit for this vulnerability is confirmed to exist in the wild. #CyberSecurity #CVE…

1 1 5 2K 2

Download Image

Cyber Ghost @CyberGhost13337

3 months ago

A compromised Turkish 🇹🇷 www[.]aysuinsaat[.]com is being used to drop a Lumma Stealer payload via ClickFix. CMD and CURL are used. The EXE is fetched from: hxxps://security-malware[.]com/index.html VT: virustotal.com/gui/url/b009e7… #malware #Lumma #Stealer #ClickFix

3 17 92 19K 46

Download Image

vx-underground @vxunderground

3 months ago

Dear Red Team nerds, If you're curious what a successful and serious malware campaign looks like (if you want to make a more serious Red Team engagement) I HIGHLY suggest reading the write up on the new malware campaign called TransferLoader zscaler.com/blogs/security…

16 287 1K 74K 1K

Karsten Hahn @struppigel

5 months ago

"How I found Malware in a BeamNG Mod" An excellent article about hunting malware on a system with a suspected infection and analysis of a WebAssembly shellcode loader. lemonyte.com/blog/beamng-ma…

1 23 105 6K 46

Download Image

Phill Moore @phillmoore

5 months ago

Week 17 - 2025 #DFIR thisweekin4n6.com/2025/04/27/wee…

0 19 31 2K 2

Smukx.E @5mukx

5 months ago

Malware Reverse Engineering for Beginners – Part 1: From 0x0 intezer.com/blog/malware-r…

2 79 351 18K 322

Download Image

Karsten Hahn @struppigel

6 months ago

How to use knowledge about .NET structures and streams for writing better .NET Yara signatures. E.g. IL code patterns, method signature definitions, GUIDs, compressed length. #100DaysOfYara #GDATATechblog @GDATA #GDATA gdatasoftware.com/blog/2025/04/3…

1 47 106 7K 45

Download Image

Steve YARA Synapse Miller @stvemillertime

6 months ago

1) I didn't know .RDP config files could be signed 2) RDP RemoteApps are crazy 3) I always appreciate a Fuzzy Snuggly Duck cloud.google.com/blog/topics/th…

3 55 210 13K 110

0x6rss @0x6rss

7 months ago

hi threat hunters and malware analysts! I want to introduce you to my newly developed tool called "Matkap". with this tool, you can infiltrate telegram bots(malbots) associated with malware, gain access to their messages, and extract all their logs! ➡️ github.com/0x6rss/matkap

11 173 994 170K 794

Download Video

spencer @techspence

6 months ago

😈 What did I miss?

31 73 492 41K 474

Download Image

Harshleen Chawla @harshleenchawl2

6 months ago

Firewall Testing Checklist 📝

11 177 1K 84K 1K

Download Image

herrcore @herrcore

6 months ago

New YARA hunting for decompiled scripts with UNPACME... Lazy malware devs exposed 👀

0 26 107 8K 41

Download Video

Aliakbar Zahravi @AliakbarZahravi

6 months ago

We have uncovered a Windows .lnk shortcut bug (#ZDI-CAN-25373) being exploited by #APT groups and cybercriminals worldwide. This bug in Windows .lnk files allows attackers to execute hidden malicious commands that aren't visible when viewing shortcut properties. More details 🧵

19 132 754 83K 447

Download Image

Silent Push @silentpush

7 months ago

⚠️ Warning: Lazarus Group Expanding Targeting in Crypto Industry We've updated our Lazarus blog with new intelligence: threat actors are not only targeting major crypto companies but also their prospective hires. These organizations have been mentioned in logs linked to recent…

1 14 49 4K 8

Is Now on VT! @Now_on_VT

7 months ago

Sample is now on VT! 🚩Hash: fbd5e3eb17ef62f2ecf7890108a3af9bcc229aaa51820a6e5ec08a56864d864d 🎯Actor name: Lazarus 🔹Comment: The Safe{Wallet} JavaScript used by Lazarus in the ByBit hack that was deployed Feb 19, 2025 17:29:05 and replaced with the original clean version…

7 68 326 164K 252

Karsten Hahn @struppigel

9 months ago

We would have less fake news about malware on USB adapters and analysis time wasted if sandboxes changed their wording from "malicious" to "interesting to look at"--which is how they are actually understood by analysts. gdatasoftware.com/blog/2024/09/3…

2 24 65 4K 13

herrcore @herrcore

9 months ago

Chinese rj45 USB adapter malware??? Our line-by-line code analysis of the "malware" and a reasonable explanation for its strange delivery (part 1)

15 82 349 28K 190

Download Video

Print3M @Print3M_

9 months ago

"Top 50 Techniques & Procedures" blog.redteamguides.com/top-50-techniq… Real world malware delivery and initial access techniques (red teaming). Good source of inspiration.