Cybervrf @Cybervrf
cybersecurity enthusiast / analyst Under a stone Joined April 2013-
Tweets43
-
Followers30
-
Following207
-
Likes125
#Kimsuky #Lazarus #APT37 #Konni #APT We want to share a tool to analyze malware from an APT group associated with the DPRK github.com/errbody/DPRK-R…
APT28 activity is especially disconcerting given their historic involvement in hack and leak ops.
🌸Spring (cyber) cleaning time! Here’s your checklist: 1. Update passwords 2. Enable multi-factor authentication 3. Back up your data No technical background required. Visit NICCS for additional online safety tips: niccs.cisa.gov/cybersecurity-…
Fox-IT | Sifting through the spines: identifying (potential) Cactus ransomware victims blog.fox-it.com/2024/04/25/sif…
Palo Alto Networks has disclosed a severe zero-day vulnerability (CVE-2024-3400) affecting its market-leading firewall software, PAN-OS. This vulnerability carries a CVSS score of 10.0, indicating its critical severity securityonline.info/cve-2024-3400-…
A few words about what appears to be a new #SocGholish related TDS: cdn-serveq[.]net currently hosted on 147.78.47[.]83 (ASN209588 FLYSERVERS):
🔥New blog! #Phobos Ransomware: Analysing associated infrastructure used by #8Base Infrastructure: 45 domains, 22 IPs in 🇩🇪🇪🇪 Capability: #Smokeloader, #SystemBC medium.com/@Intel_Ops/pho… Findings below:
@g0njxa hxxps://31.207.37[.]227/ seems still active downloading from the url you found.
https://165[.]22[.]54[.]46/ #FAKEUPDATES redirect (Still live) to hxxps[://]my[.]hoqer[.]com/temp/WebModuleBrowser[.]zip
Looks like we've got a new name here "Hanlu Network Security Team"
@whichbuffer @BushidoToken @Gi7w0rm They also talk about sstap sourceforge.net/projects/sstap/ SSTap, short for SOCKSTap, is used to “socksify” TCP and UDP connections at the network layer. In the Trendmicro article they are also talking about SOCKS5 being used.
Fake Chrome update found at hxxp://159.89.175[.]38/ still live hxxps://paolomorettifurs[.]com/temp/EngineChromium[.]zip
@banthisguy9349 While at it found also: hxxps[://]170[.]210[.]104[.]31
New fantastic report -- Chinese APT intrusion into Ministry of Defence (MOD) of the Netherlands. ncsc.nl/documenten/pub…
We saw new #Qbot #Qakbot "tchk07" from PDF > URLs today. MSI > AdobeAC.dll w/ export EditOwnerInfo. This is still very low volume and targeted. Huge shout out to our fantastic @Myrtus0x0 for the RE and config extraction. IOCs in original thread. Samples: bazaar.abuse.ch/browse/tag/tch…
Proofpoint has observed new #Qbot MSIs being distributed signed "Clover Field ApS". MSI: e88610db05636a1476435ec1f39d3651b080c8a6b8756452d421d7a822a2e115 DLL: 12094a47a9659b1c2f7c5b36e21d2b0145c9e7b2e79845a437508efa96e5f305
@tunnelgre @Cryptolaemus1 They use mail thread hijacking based on earlier send mail. That way, they try to make users believe it is a valid mail. While this is not the case.
🆕 Top 10 Cyber Threats of 2023! While you're rockin' around the TTPs 🎄 Grab a mince pie 🥧 and have a look back over the last year before we head into 2024 🎆 🔗 blog.bushidotoken.net/2023/12/top-10… #infosec #cybersecurity #cti #threatintel
hxxp[://]ec2-35-179-8-15[.]eu-west-2[.]compute[.]amazonaws[.]com/ hxxp[://]35[.]179[.]8[.]15/ AND hxxps[://]app[.]alwasl[.]tn #FAKEUPDATE Both have redirect to hxxps[://]my[.]hoqer[.]com/temp/WebModuleBrowser[.]zip
👾Pivoting from the domain reveals an interesting small cluster.... 🔓92.240.80.5 0/88 VT Score 🔓81.16.32.65 2/88 VT Score 🔓185.165.40.224 0/88 VT Score 🔓94.74.115.3 0/88 VT Score but Flagged by @Cybervrf 🔓188.165.219.33 2/88 VT Score 🔓161.97.185.178 0/88 VT Score All hosting the update page on their active ports! urlscan.io/result/1e4d83d… urlscan.io/result/43431fc… #FAKEUPDATE #KryptoCTI #KryptoKloud #C2Engine
Found new #FAKEUPDATE pages: shipibulk.easymall[.]co[.]th easymall[.]co[.]th but no download. Redirect to hxxps://subirat[.]net/engine/index.php What could it be? @g0njxa @JAMESWT_MHT
SapphireDusk @LaurenJone17914
7 Followers 260 Following ✨ Earn Big Daily: 50-100000 USDT Potential! Secure & Fast Crypto Earning Starts Here For You. High Potential, Quick Returns Always. 💰⚡
Stephania Stehr @StehrSteph16645
0 Followers 88 Following
Tootys @TootysTBgETF
52 Followers 4K Following
IT CPE Academy @itcpecredit
272 Followers 3K Following Self-Study CPE Programs to help professionals acquire the skills, knowledge and certificates in IT and cybersecurity
Simone @shimomiyar20693
86 Followers 7K Following
SystemTek - Technolog... @SystemTek_UK
2K Followers 5K Following Welcome to SystemTek - Est 1999, find the latest tech news and information at https://t.co/I9t1QXbRbr
Hunter For Fun @Thisism23567356
678 Followers 373 Following
I//uS!0nS @c03rci0n
68 Followers 8K Following
Andy Norton @1AndyNorton
0 Followers 25 Following
DonPasci @DonPasci
286 Followers 207 Following
Leah @s_leah17
169 Followers 3K Following
IPAE! @ActorExpose
4K Followers 4K Following Expose phishing pages and sometimes malware on domain to either to get reported or exposed out public. Majority of these criminals are part of the underground.
cowriousdoom @cowriousdoom
0 Followers 10 Following
dougy @R3dHash
843 Followers 2K Following Cyber Threat Intelligence | OSINT | Misinformation | Threat Hunting
SpaceWhale @baibeul6
7 Followers 591 Following
Lupe Laaw @1LupeLaaw
37 Followers 1K Following
b @laskow26
424 Followers 372 Following
Chris Duggan @PadelLifeUK
8K Followers 3K Following Pro Padel Coach 🎾 | MDS Legendary Finisher | Ultra Endurance | Author — The Intent Model | Cyber Intelligence for Fun
voidsip @voidsip
513 Followers 1K Following i do cybersecurity stuff sometimes, play video games other times
حمزه الشمرا... @hmzh8
645 Followers 374 Following (لا الــه الا انت سبحانــكْ اني كنتُ من الظالمـيـن)
Dray Agha @Purp1eW0lf
6K Followers 3K Following Hunt & Response Senior Manager @HuntressLabs || "Competition is the law of the jungle, but cooperation is the law of civilisation” - Kropotkin
EarlyBig @secum3r
26 Followers 1K Following thoughts are mine alone. Retweets ≠ endorsements. Liking ≠agreeing everything that person posts. #cybersecurity #informationsecurity #DFIR
Ebubekir @hackerbecker
255 Followers 3K Following Malware Analyst @PRODAFT - @_aucc, Karidesler CTF player @[email protected]
Andy Piazza @klrgrz
7K Followers 3K Following Christian. Killer Grizz, Threat Intel & Thrunter. Hack things w/ @bsides_nova. @DEFCON Contests Dept Lead & Black Badge DC32. GSE #344. (VIEWS ARE MY OWN).
watchTowr @watchtowrcyber
16K Followers 12 Following watchTowr enables organizations to get ahead of in-the-wild exploitation with Preemptive Exposure Management technology.
CCB Alert @CCBalert
7K Followers 201 Following CCB Alert is the advisory page of the Centre for Cybersecurity Belgium @CCBbelgium. Use [email protected] for interaction.
Baptiste Robert @fs0c131y
252K Followers 5K Following CEO @PredictaLabOff | French Security Researcher, Ethical Hacking, OSINT
Kevin Holvoet @digihash
2K Followers 850 Following Cyber Threat Research Lead @CCB_Belgium/@CCBalert | #FOR578: #CTI @SANSInstitute instructor | @CuratedIntel | loves to try new things: food, beer whisky, etc.
38 North @38NorthNK
38K Followers 490 Following Informed analysis of events in and around the DPRK. A publication of the @StimsonCenter. Innovative Ideas Changing the World.
Cyber Team @Cyberteam008
3K Followers 62 Following Threat Hunting | APT Tracking | Malware Analysis | Darkweb Monitoring "Unity is Strength"
OSINTdefender @sentdefender
2.6M Followers 2K Following Open Source Intelligence Monitor focused on Europe and Conflicts across the World. RT ≠ Endorsement. Want to Support my Work? https://t.co/PcUbewwuEZ
Wesley @wesleyneelen
2K Followers 590 Following Hacker @ Zolder (@zolderio / @attic_security / @dscm_security) OSCP || OSCE || OSEP || OSWE
Pierre @pigerlin
744 Followers 136 Following Analyst @TheDFIRReport | Passionate about all things DFIR 🇳🇱
sovereign Shadow @securitybrahh
4K Followers 332 Following Teaching ppl how to stay anon since 1984. Privacy Plumber. Constructing Secure Digital Empires. DM's open. Not Security Advice. Breaker of Chains. Ecopolitica.
Sam Bent @DoingFedTime
21K Followers 446 Following Agorist. Counter-economist. Privacy maximalist. Student of OPSEC. Anti-authoritarian. Free speech absolutist. Logician. Ex-Darknet Vendor. Youtuber.
DonPasci @DonPasci
286 Followers 207 Following
Hackmanac @H4ckmanac
136K Followers 372 Following We track verified, real-world cyber attacks to help you develop effective Cybersecurity strategies. Try https://t.co/eB7qgxKFAa, your Strategic Threat Intelligence platform
SANS DFIR @sansforensics
112K Followers 104 Following The world's leading Digital Forensics and Incident Response provider. This feed updates you on latest DFIR news, events, and training.
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Dutch Institute for V... @DIVDnl
5K Followers 140 Following We aim to make the digital world a safer place by reporting vulnerabilities we find in digital systems to the people who can fix them.
Intel-Ops @Intel_Ops_io
2K Followers 4 Following Adversary Infrastructure Hunting & Training Curated Threat Intelligence Feed (Coming Soon) https://t.co/N9OKrTrvV0 https://t.co/3YFZfEbgpI
Will Dormann is on Ma... @wdormann
27K Followers 1K Following I play with vulnerabilities and exploits. I used to be here on Twitter but now I'm here: @[email protected] https://t.co/hXggdAVkSQ
Andrew Thompson @ImposeCost
42K Followers 2K Following SVP of Adversary Operations @GreyNoiseIO. Former @USMC and @Mandiant. There's no finish line in security.
Szabolcs Schmidt @smica83
4K Followers 511 Following Threat Intel Specialist and Incident Responder. Private account. All opinions expressed here are mine only. https://t.co/7dQQO1JwUd
Arda @whichbuffer
323 Followers 649 Following Senior Cyber Threat Intelligence Analyst and Threat Researcher @EclecticIQ
ThreatRecon @nshcthreatrecon
5K Followers 4 Following We are the Cyber Threat Intelligence division of NSHC Threat Research Lab. We track Threat Actor Groups activities worldwide and aim to release our findings.
Mikhail Kasimov @500mk500
5K Followers 639 Following Malicious traffic detection system: @maltrail; Maltrail Demo Page: https://t.co/eimXdZvjWo; Maltrail FAQ: https://t.co/Kne9lewPHT
Rich Warren @buffaloverflow
11K Followers 672 Following Red Team & Offensive Security Research @AmberWolfSec
Renzon @r3nzsec
5K Followers 934 Following IR/Forensics @Unit42_Intel | Contributor/Analyst @TheDFIRReport @XintraOrg | Co-Founder @guidemtraining | CTF member @_hackstreetboys
Cryptolaemus @Cryptolaemus1
20K Followers 205 Following Where are mealybugs now!?! We is hungry and no one wants to play anymore. Where everyone at?
crep1x @crep1x
3K Followers 315 Following Lead cybercrime analyst, tracking adversaries activities & infrastructure, at @sekoia_io
Michael Koczwara @MichalKoczwara
25K Followers 2K Following Threat Researcher/Founder @Intel_Ops_io Threat Intelligence, Adversary Infrastructure Hunting, Curated TI Feed (Coming Soon) https://t.co/VQWaze6gaF
Who said what? @g0njxa
6K Followers 100 Following ChatGPT says I'm a cyber researcher :) | donate 💸 to g0njxa.eth 💖 | Bad student, enthusiast, defo not an expert DMs are open, feel free to reach! 😼☂️🟣
Group-IB Threat Intel... @GroupIB_TI
18K Followers 182 Following Official account of the @GroupIB Threat Intelligence Unit. Latest research, analytics, IOCs and threat alerts.
Sanne @sannemaasakkers
7K Followers 567 Following Researching and analyzing digital threats @Mandiant (@Google) | Only here for the malware samples 👾
HackerHotel @HotelHacker
1K Followers 327 Following Hacker Hotel provides a luxurious hacking experience. For hackers and makers, with workshops and lectures at all skill levels!
Fox_threatintel @banthisguy9349
16K Followers 291 Following Just a person who is against cyber crime and dictators like Putin
PeterM🌻 @AltShiftPrtScn
3K Followers 100 Following Work in DFIR, fighting the good fight. Don't go 5 minutes without saying ransomware. Created as a failsafe: https://t.co/zIAq2Hz99E
TOUHAMI KA @vxremalware
1K Followers 187 Following WORK HARD TO MAKE IT VULNERABLE AND SECURE IT AGAIN.
Cyber Detective💙�... @cyb_detective
63K Followers 3K Following Every day I write about #osint (Open Source Intelligence) tools and techniques. Also little bit about forensics and cybersecurity in general. Work in @netlas_io
Fate112 @tosscoinwitcher
1K Followers 124 Following Witcher of InfoSec. InfoSec=paid to be terrified for people. /With all of my anger I scream and shout America, I love you but you're freaking me out/
TI Research @tiresearch1
687 Followers 100 Following Threat Intelligence Feeds, Automatically generated list of IOCs
Aura @SecurityAura
6K Followers 680 Following GCIH, GCFE, GDAT | DFIR, TH, DE | @CuratedIntel DFIR https://t.co/BMWUwziTLh https://t.co/MmX2YNVqdk https://t.co/R20zseQfLk
Filip Dragovic @filip_dragovic
8K Followers 1K Following My research unless stated otherwise. My opinions are my own and do not represent the views of my employer. Red Team @MDSecLabs
Br3akp0int @tccontre18
2K Followers 952 Following tweets are my own😉 Threat Researcher - interested in: (R.E, Red/Blue/Purple Team, DFIR, ML, Kernel, Exploit Dev) - https://t.co/qJyB5lIuHj
Malcolm @malkoegler
325 Followers 474 FollowingTrends for United States
You might like
