somedieyoungZZ @IdaNotPro
Threat Hunter | Malware Analysis sudo pacman -S kimsuky somedieyoungzz.github.io Subroutine Joined February 2024-
Tweets118
-
Followers353
-
Following349
-
Likes155
We(@PrakkiSathwik & me) presented our research 🇩🇪@virusbtn , it was exciting to meet super cool people & set of interesting research!
@PrakkiSathwik & I released our research on UNG0002, targeting many Asian geographic regions. We found multiple overlaps like the TA try to mimic other APT/UNC groups, uses DLL-Sideloading into Rasphone, Node-Webkit,also uses ClickFix, thanks to @malwrhunterteam for also hunting.
@PrakkiSathwik & I released our research on UNG0002, targeting many Asian geographic regions. We found multiple overlaps like the TA try to mimic other APT/UNC groups, uses DLL-Sideloading into Rasphone, Node-Webkit,also uses ClickFix, thanks to @malwrhunterteam for also hunting. https://t.co/66JkPMwoBM
We ( @PrakkiSathwik & me) presented our research on Cobalt Whisper & UNG0002( campaigns related to it) at @FIRSTdotOrg at Copenhagen! Met some cool folks such as @Gi7w0rm , collected some conference swags from @TeamT5_Official , research & presentation to be released soon!
🚨 New post: Operation Holding Hands An advanced campaign linked to SilverFox APT using Winos 4.0 and stolen certs. 🔗 somedieyoungzz.github.io/posts/silver-f… #APT #Malware
New Research! seqrite.com/blog/operation… We have found an interesting campaign targeting an entity of Chinese telecom with VELETRIX implant. The implant uses anti-sandbox, shellcode obfuscation technique via IPV4 and execution via EnumCalendarInfo leading to Vshell implant.
"张婉婉简历(0).zip": 0b247648f16b53b01bfa6bdc85fd8f18f89bfbec789292923895591c78ab6ec6 -> the .lnk file -> "update.vbs" -> "MacUpdate.exe" (legit, used to load the malicious .dll) -> "nw_elf.dll": c3ccfe415c3d3b89bde029669f42b7f04df72ad2da4bd15d82495b58ebde46d6 🤔
Just pwned Windows 11 with a kernel 0day in Pwn2Own Berlin! Thanks to my teammates Gerrard and Thach(@hi_im_d4rkn3ss) for helping me run the exploit. Goodluck to their entries as well.
Just pwned Windows 11 with a kernel 0day in Pwn2Own Berlin! Thanks to my teammates Gerrard and Thach(@hi_im_d4rkn3ss) for helping me run the exploit. Goodluck to their entries as well.
New Research! "Swan Vector APT: Targeting Taiwan & Japan with varied DLL implants" We have found an unknown threat actor, which we have attributed to East Asia, targets Taiwan and Japan with DLL implants, Pterois & Isurus. Read it here: seqrite.com/blog/swan-vect…
#APT36 #SideCopy #APT IOCS pastebin.com/j6W55KHy Mythic C2s, ELF Payloads, Decoy PDFs and some extra All pivoted using #Censys x.com/bofheaded/stat… Nothing related to the current affairs of war @500mk500 @IndianCERT @PrakkiSathwik @suyog41
#APT36 #SideCopy #APT IOCS pastebin.com/j6W55KHy Mythic C2s, ELF Payloads, Decoy PDFs and some extra All pivoted using #Censys x.com/bofheaded/stat… Nothing related to the current affairs of war @500mk500 @IndianCERT @PrakkiSathwik @suyog41 https://t.co/YnMNiQSuw8
#APT36 #TransparentTribe #APT Me and @ElementalX2 found _dc-mx.1a31c5a0e8c5[.]ministryofdefenceindia[.]org apollokhos[.]co[.]in email[.]gov[.]in.departmentofspace[.]info indiandefence[.]services mod[.]gov[.]in.indiandefence[.]services departmentofspace[.]info
#APT36 #TransparentTribe #APT MoM Regarding Ops Sindoor and Emerging Security Scenario MEA .pdf bbfae75909996ec80b3e8308bb63fad0 more IOCs 37.221.64[.]134 78.40.143[.]188 mea[.]gov[.]in[.]indiandefence[.]services ministryofdefenceindia[.]org @PrakkiSathwik @500mk500 @IndianCERT
OPERATION SINDOOR #JusticeServed Target 2 – Gulpur Terrorist Camp at Kotli. Distance – 30 Km from Line of Control (POJK). Control Center and Base of Lashkar-e-Taiba (LeT) Used for revival of terrorism in Jammu and Kashmir. DESTROYED AT 1.08 AM on 07 May 2025.…
Hi everyone! Recently, I uncovered a new campaign potentially tied to DPRK’s ##KonniAPT. It starts with a sneaky .lnk file disguised as a Korean document uses KakaoTalk lures to kick off a stealthy infection chain. Check it out: muff-in.github.io/blog/Malware-C…
Ruth @ruth_turner73
331 Followers 3K Following
Supaboii @D4nkSkiee
1 Followers 51 Following
Colette @Uzretarf8360
39 Followers 2K Following I’m not a backup plan, and definitely not your second choice.
BobbyTcnotty @tcnotty
1 Followers 9 Following
AiTM Feed @AiTM_Feed
15 Followers 10 Following Ad-hoc cyber threat intel from our team of active hunters at @lab539. We mainly track Adversary in The Middle infrastructure and share indicators of attack.
ShadowOpCode @ShadowOpCode
646 Followers 119 Following Malware analyst & reverse engineer 🧠 Threat intel on stealers, RATs, live campaigns 🕵️ Technical analysis. No buzzwords. 📍DM open for research collabs
Marv @_Marv0
0 Followers 61 Following
clibm079 @clibm079
163 Followers 656 Following Independent Malware Analyst & Researcher,Notes (Philosophy & Poetry) — The Path of Clarity & Poems of Malware Analysis. Blog: https://t.co/DJ3Wxn2OWS
Marty D'Amore @MartyA66365
32 Followers 3K Following
Dung @Dung09749137
0 Followers 1 Following
Ralos @raloskneit
1 Followers 185 Following
PUSHKAR ZEND @ZendPushkar28
0 Followers 103 Following
Winx @Winx16529811
3 Followers 100 Following
HAMMADALIDAHRI @Hammadalidahri
1 Followers 62 Following
CyberLLM @CyberLLM
8 Followers 52 Following Your best AI-powered 🤖 malware analysis assistant for rapid triage 🤗 Get access: https://t.co/3wKicSJ9RU Questions & Support: https://t.co/hv4Y6iDpjR
Saluzari @Mayanakoto
1 Followers 230 Following
aridjourney @aridjourney
19 Followers 535 Following Threat research @HarfangLab. Opinions are my own.
Leonardo Gil @UnctusM
192 Followers 3K Following Infosec Addict. Ibis, redibis, nunquam per bella peribis.
n0tspam @n0tspam
85 Followers 697 Following offensive security and hobbyist developer. Usually always learning. OSCP | CRTO
gousheng_er @Gousheng_er
7 Followers 255 Following
threathunterxx @threathuntxx
52 Followers 1K Following This account is for threat research purposes 😬 (not affiliated with any account) | For personal use
Nsk @nsk_offl_
350 Followers 4K Following Director🎬& Lyricist of Kattravai Katrapin & Onedaykadhalan CyberSecurity Analyst,Travel freak, Ardent Suriya ❤ Jo,Maddy🤩,VJS😍 Fan,CR7MSD Fan🤟,Maduraikaran😎
B @est3ban0c40
2 Followers 93 Following
nop4tch @nop4tch
6 Followers 90 Following
Szabolcs Schmidt @smica83
2K Followers 420 Following Threat Intel Specialist and Incident Responder. Private account. All opinions expressed here are mine only. https://t.co/7dQQO1JwUd
Alex @alex_bondcoo
407 Followers 5K Following 追求自由而又缺失在自由道路上..........Don't trust words, trust actions.
Ff @7zCooler
2 Followers 270 Following
Vxshellew @vxshellew
555 Followers 4K Following
theonexc @theonexc1
0 Followers 3K Following
Muni Daira @MuniDaira
3 Followers 61 Following
Sambam4mba @he31707900
9 Followers 1K Following Bor3d hacker of iot devices, security researcher? Security Breacher!
Hardik Shah @hardik05
4K Followers 4K Following Principal Security Researcher - Tweets and opinions are my own and not of my employer. #fuzzing #trainings #security YouTube: https://t.co/grWZKdQlqr
db @whokilleddb
1K Followers 513 Following Maldev @bhinfosecurity | Finding increasingly stupid ways to do simple things
Source Defense Resear... @sdcyberresearch
307 Followers 1 Following A cybersecurity company specializing in web application security, protecting against supply chain attacks and client-side vulnerabilities
ClearSky Cyber Securi... @ClearskySec
10K Followers 497 Following Cyber security and threat intelligence company
Coral Jasmine @Fact_Finder03
318 Followers 234 Following
Threat Insight @threatinsight
11K Followers 217 Following @Proofpoint's insights on targeted attacks & the security landscape. Follow us on Bluesky: https://t.co/8OVfhotdeP
Meridian Group @MeridianEU
45 Followers 11 Following Beyond Cyber Security | Defensive, Offensive, and Investigative core of Cyber Digital Intelligence.
ShadowOpCode @ShadowOpCode
646 Followers 119 Following Malware analyst & reverse engineer 🧠 Threat intel on stealers, RATs, live campaigns 🕵️ Technical analysis. No buzzwords. 📍DM open for research collabs
AiTM Feed @AiTM_Feed
15 Followers 10 Following Ad-hoc cyber threat intel from our team of active hunters at @lab539. We mainly track Adversary in The Middle infrastructure and share indicators of attack.
neeraj @knight0x07
1K Followers 819 Following Security Researcher @SentinelOne | Malware Loving Homo Sapien | I do xchg eax,eax | Tweets are my own
Kağan IŞILDAK @kaganisildak
4K Followers 2K Following co-founder @malwation @threatzone_ :: [email protected] building holistic platforms to analyze malware
clibm079 @clibm079
163 Followers 656 Following Independent Malware Analyst & Researcher,Notes (Philosophy & Poetry) — The Path of Clarity & Poems of Malware Analysis. Blog: https://t.co/DJ3Wxn2OWS
alex lanstein @alex_lanstein
3K Followers 3K Following threaty threats @ StrikeReady -- helping build research workflows into the product. pretty good at bash scripts and strings. disclosures on my linkedin below
RedDrip Team @RedDrip7
16K Followers 29 Following Technical Twitter of QiAnXin Technology, leading Chinese security vendor. It is operated by RedDrip Team which focuses on malware, APT and threat intelligence.
Sudeep_Singh @SinghSoodeep
212 Followers 43 Following Cyber security expert | Blockchain researcher | Fitness Enthusiast Opinions expressed are my own and not of my employer.
Aidan Khoury @aidankhoury
2K Followers 170 Following
Nick Peterson 🇺�... @nickeverdox
3K Followers 279 Following @RiotGames - anticheat team. Opinions expressed are obviously my own. https://t.co/foRcgwMV3U
Coffin @coffinxp7
25K Followers 206 Following 🕵🏻♂️| ꜱᴇᴄᴜʀɪᴛʏ ʀᴇꜱᴇᴀʀᴄʜᴇʀ | ᴄᴏɴᴛᴇɴᴛ ᴄʀᴇᴀᴛᴏʀ | ᴡʀɪᴛᴇᴜᴘꜱ: https://t.co/xRCKfLzQG7 |ᴡᴇʙꜱɪᴛᴇ: https://t.co/pjFfqTxbZO | ᴄᴏᴍᴍᴜɴɪᴛʏ: https://t.co/5p05U7h0BM
spotheplanet @spotheplanet
11K Followers 147 Following Hacking the planet at https://t.co/ifUgKQtEYV. Buy me a vinyl at https://t.co/SO41y55HJL
Chris Duggan @TLP_R3D
7K Followers 3K Following Head of Threat Informed Defence for a FSTE 100 | Malware Geek | Curated Intel Member | Threat Intelligence Expert Extraordinaire
Bitshadow @fbgwls245
2K Followers 128 Following Ransomware & Dark Web tracker | Self-taught threat hunter | Forever learning, forever hunting | Student (dnwls0719)
Ariel Jungheit @ArielJT
1K Followers 214 Following Life under the sea was so much easier | Threat Research @harfanglab | Maker | Tweets are my own
Smukx.E @5mukx
16K Followers 227 Following Malware Researcher & Red Teamer | 0..=n Day 🔬 at 🌒 | 0x15 Y/o
CERT-UA @_CERT_UA
2K Followers 73 Following Урядова команда реагування на комп’ютерні надзвичайні події України CERT-UA (Computer Emergency Response Team of Ukraine CERT-UA )
IDontCode @_xeroxz
4K Followers 562 Following Compilers, Math, Windows, Obfuscation, x86-64, Hardware Hacking, and everything in-between Cofounder @BackEngineerLab building https://t.co/tlnjvFj2Lg
secret club @the_secret_club
17K Followers 0 Following secret club is a not-for-profit reverse-engineering group; publishing new research on popular software. No ads, no cookies, just research.
RST Cloud @rst_cloud
472 Followers 86 Following Threat intelligence solutions for businesses of all sizes
Cyber_OSINT @Cyber_O51NT
19K Followers 298 Following #OSINT treasure hunter, investigator, #CyberThreatIntel analyst. Opinions are my own. Follow me on Telegram https://t.co/i6VBbeUXgd for cyber news.
AnMioLink @anylink20240604
273 Followers 15 Following 404.02 Undefined Request Behind the fog where the link lead. I'm not here, so do you. Ver. Confusus
moiz🇻🇳 @moiz_hehe
54 Followers 68 Following
flux @0xfluxsec
2K Followers 994 Following CRTO | Cyber professional (red team), security and systems programming | Rust | https://t.co/QIih2B7vya | https://t.co/VC3xsm0Wvq
Duncan Ogilvie 🍍 @mrexodia
9K Followers 334 Following Reverse engineer, creator of @x64dbg and 100+ other projects. Love binary analysis and Windows internals. Dreaming about doing open source full time...
Xyrem @Xyrem256
855 Followers 111 Following Dude who's interested in anti-cheats, windows internals, and reverse engineering. My opinions are my own.
Malware Village @MalwareVillage
2K Followers 78 Following Founded by Lena Yu aka @LambdaMamba | Run by World Cyber Health (WCH) Non-Profit | Discord: https://t.co/JE25nRRco6 | Email: [email protected]
CHA Minseok(Jacky) @mstoned7
3K Followers 5K Following CHA is my family name. Senior Principal Threat Intelligence Researcher at AhnLab / Keybase : mstoned7 , Signal : mstoned7.21 / Tweets are my own.
Back Engineering Labs @BackEngineerLab
1K Followers 4 Following Developing https://t.co/FGFRjFl0ql Discord: https://t.co/EeXwaigjlI
Microsoft Security Re... @msftsecresponse
145K Followers 215 Following We are the Microsoft Security Response Center. To report security vulnerabilities or abuse in Microsoft products, visit https://t.co/kxEbdfMny1.
Necromancer @ZeroMemoryEx
2K Followers 483 Following Cyber Security Consultant | Security Researcher
Bruce Ketta @bruce_k3tta
248 Followers 413 Following Malware Research Engineer @Threat_Down || 𝙸𝚗 𝚌𝚢𝚋𝚎𝚛𝚜𝚙𝚊𝚌𝚎, 𝙺𝚞𝚖𝚒𝚔𝚘 𝚗𝚘𝚝𝚎𝚍, 𝚝𝚑𝚎𝚛𝚎 𝚊𝚛𝚎 𝚗𝚘 𝚜𝚑𝚊𝚍𝚘𝚠𝚜
Squiblydoo @SquiblydooBlog
4K Followers 77 Following Malware Analysis Creator of Debloat, certReport, and https://t.co/w4rAuuB7O0 Want to chat? Join the Debloat discord: https://t.co/ZcWIqa6ZA9Trends for United States
You might like
