Alfred Alvarado @_Fritto_

Threat Researcher @Trellix - My tweets are my own Dallas, TX Joined November 2008

Tweets

89
Followers

95
Following

391
Likes

70

Trellix Advanced Research Center @TrellixARC

2 years ago

ICYMI: On August 29, 2023, an FBI-led effort dismantled the Qakbot malware and botnet. Learn about the upward attack trend preceding the takedown from Daksh Kapur, @_Fritto_, and Nico Yturriaga. bit.ly/3R8uZeo

0 3 3 633 0

Download Image

Trellix @Trellix

2 years ago

Law enforcement led a successful campaign to disrupt and dismantle Qakbot on August 29, 2023. @TrellixARC’s Daksh Kapur, @_Fritto_, and Nico Yturriaga share everything you need to know to understand the malware and botnet. Qakbot: bit.ly/3R8uZeo

0 3 5 1K 0

Download Image

The Information Security Collective | 501(c)3 @InfoSecTogether

2 years ago

🚨 Giveaway 🚨 Do we need a reason to hold a giveaway? We want to give away two @TCMSecurity vouchers! (1) Practical Web Application Penetration Testing AND (1) Practical Ethical Hacking All you have to do to enter is: 1️⃣ Retweet this Tweet 2️⃣ Make sure you’re following…

41 193 146 28K 8

Alfred Alvarado @_Fritto_

2 years ago

T-2: n00b pin acquired, presenting room found, n00b pin already lost 😞

0 3 6 339 0

Download Image

Trellix @Trellix

2 years ago

Explore securing the software supply chain with VP Customer Advocacy, @TrellixARC Karine Ben-Simhon at the Moscone South 207 #RSAC Sandbox Stage. The panel will cover: 🛡️ Threat intelligence 📈 Recent trends 🧰 Mitigation strategies Join her: bit.ly/3KjUlRA

1 4 3 2K 0

Download Image

Trellix @Trellix

2 years ago

Want to mitigate the risk of being targeted w/ LOLBins? During their #RSAC session (located in Moscone South - 153), @TrellixARC researchers @tim_hux & @_Fritto_ discuss applicable threat hunting strategies & map MITRE techniques to real world examples. bit.ly/3KjUlRA

0 1 0 2K 0

Download Image

Trellix @Trellix

3 years ago

Avoid being a future victim of weaponized LOLBins — join @TrellixARC security researchers @tim_hux and @_Fritto_ at #RSAC to equip yourself with relevant threat hunting tools & techniques. bit.ly/3nEd02F

0 2 3 2K 0

Download Image

Alfred Alvarado @_Fritto_

3 years ago

In an additional report today, the @Trellix Threat Intelligence Group talks CVE-2021-21974, providing data on telemetry gathered by our sensors & share information about activity targeting this 2yr old vuln that some have left unpatched. trellix.com/en-us/about/ne…

0 0 4 179 0

Alfred Alvarado @_Fritto_

3 years ago

The latest @Trellix report covers CVE-2023-0286, researchers Mark Bereza(@ROPsicle) & John Dunlap discuss the vulnerability as well as the litany of prerequisites & mitigating factors that limit its usefulness to attackers. trellix.com/en-us/about/ne…

0 3 1 250 0

Alfred Alvarado @_Fritto_

3 years ago

VMWare identified older and outdated products that have reached end of general support are those targeted in ESXiArgs Ransomware attacks. VMWare recommends upgrading to the latest supported version and disabling the OpenSLP service in ESXi. blogs.vmware.com/security/2023/…

0 0 0 72 0

vx-underground @vxunderground

3 years ago

Lockbit ransomware group has informed us they have acquired a 3rd ransomware variant. - Lockbit Red - Lockbit Black - Lockbit Green They also have modified their ESXI ransomware variant. Yes, they actually wrote "TLP:RED" in the image.

29 105 468 126K 31

Download Image

vx-underground @vxunderground

3 years ago

HIVE ransomware group's Tor domain has been seized by EUROPOL *No official announcement yet from United States Department of Justice or EUROPOL

21 157 704 132K 34

Download Image

Germán Fernández @1ZRR4H

3 years ago

1/ DEV-0569, current distribution via #GoogleAds. 1.- #Gozi aka #Ursnif (bot) ↓ 2.- #RedLine (stealer) ↓ And if the conditions are right, possibly: 3.- #CobaltStrike (C2) ↓ 4.- #Royal Ransomware 💥 (No more BatLoader in the infection chain)

4 102 260 60K 57

Download Image

Germán Fernández @1ZRR4H

3 years ago

🚨 Ongoing mass exploitation of CVE-2022-44877 (Centos Web Panel 7 Unauthenticated Remote Code Execution). Source: 206.189.170.136 🇺🇸 Malicious Base64 payload is a reverse shell that connects to 206.189.170.136:9181 The scanning of CWP instances started around January 06th.

6 35 95 15K 15

Download Image

Alfred Alvarado @_Fritto_

3 years ago

Hot Off The Press - The Trellix Threat Report: Fall 2022 – Insights Ransomware Tracking trellix.com/en-us/advanced…

0 0 0 0 0

Alfred Alvarado @_Fritto_

3 years ago

Oh, It’s about to get real 01:15 PM tomorrow “Catch Me If You can”

Trellix @Trellix

3 years ago

Oh, It’s about to get real 01:15 PM tomorrow “Catch Me If You can”

0 1 1 0 0

Download Video

0 1 2 0 0

Trellix @Trellix

3 years ago

Learn how to detect and address a threat hiding in a non-malicious source by diving into Living off the Land (LotL) attacks and exploring how to defend against them at Xpand Live. Register today: trellix.com/xpand

0 1 1 0 0

Download Video

Trellix Advanced Research Center @TrellixARC

3 years ago

"The attack can be performed without user interaction if the management interface of the device has been configured to be internet facing." @phLaul explains a new critical remote code execution vulnerability impacting DrayTek routers. Read here: go.trellix.com/3dEf0D6

0 1 5 0 0

Trellix @Trellix

3 years ago

Join us from September 27-29 at Xpand Live for a deep dive into five relevant areas of modern security, covering everything from SecOps to #SoulfulWork and more! ▶️ ▶️ Register now: go.trellix.com/3vWBS7p

1 2 4 0 0

Download Image

Trellix @Trellix

4 years ago

Join @spovolny in New Orleans on April 7th and listen to a great session titled A Case Study in Hacking Critical Infrastructure. go.trellix.com/3tqxPxR