George @_z3nn

GPEN | GCFA 45.4082092,-123.0075212 Joined May 2019

Tweets

64
Followers

27
Following

184
Likes

42

Sam Curry @samwcyo

3 years ago

We recently found a vulnerability affecting Hyundai and Genesis vehicles where we could remotely control the locks, engine, horn, headlights, and trunk of vehicles made after 2012. To explain how it worked and how we found it, we have @_specters_ as our mock car thief:

75 1K 5K 0 913

Download Image

The Ransomware Files @ransomwarefiles

3 years ago

The Ransomware Files podcast project has come to a close. Here's why. Big thanks to everyone who supported it, including @JackRhysider, @boblord, @mikko, @riskybusiness, @SeanCPow, @ClickHereShow, @hackedpodcast, @JordanBloemen and many, many more. Thank you! #infosec

13 18 97 0 19

Download Video

George @_z3nn

3 years ago

leaving this here... github.com/7a336e6e/cve_m… I made a 'quick and dirty' way to query Github for new PoC repositories for CVEs. A simple way to keep up to date with new PoCs. No VPS, subscription, API key required... as free as it gets.

0 2 1 0 0

The Ransomware Files @ransomwarefiles

4 years ago

New! Ep. 6 of the @ransomwarefiles podcast. REvil's attack against Kaseya was one of the biggest and most intriguing ransomware incidents so far. Here's how it went down. anchor.fm/ransomwarefiles W/ @seccubus @DIVDnl @0xDUDE @_JohnHammond @_z3nn @Sacx13 @KaseyaCorp @Jon__DiMaggio

4 49 114 0 16

Download Image

SANS.edu Internet Storm Center @sans_isc

4 years ago

First request resembling the #spring4shell exploit came from 183.193.45.80 (Shanghai CN China Mobile)

0 22 45 0 2

The Ransomware Files @ransomwarefiles

4 years ago

Alright I've finished the script for the next episode about the Kaseya REvil ransomware incident! Onto recording. It's gonna be terrific - I think y'all will dig it. Blizzard of transcripts below.

2 5 72 0 4

Download Image

MalwareHunterTeam @malwrhunterteam

4 years ago

Anyone made this picture, 👏👏👏. 😂 (Saw it thanks to this article: blog.minerva-labs.com/meet-the-timet…)

2 3 24 0 2

Download Image

Jack Rhysider 🏴‍☠️ @JackRhysider

4 years ago

This is Eagle Eye. It's a tool used to find people's social media accounts. You feed it the name of the person and an image of them. It does a reverse lookup on the image, uses facial recognition, then tries to find any Instagram, Facebook, or Twitter profiles of that person.

61 845 4K 0 1K

Download Image

Volexity @Volexity

4 years ago

Volexity has identified a North Korean APT known as InkySquid exploiting users using recent exploits for IE and Edge via Strategic Web Compromises. More here: volexity.com/blog/2021/08/1… #threatintel #dfir

4 160 273 0 28

Download Image

George @_z3nn

4 years ago

gotta say... really inventive how they trick the user into downloading the malware bleepingcomputer.com/news/security/…

0 0 0 0 0

JAMESWT @JAMESWT_WT

4 years ago

#BRT spam email spread #ursnif #gozi #ISFB #Italy "BRT S.P.A. Sollecito pagamento fatture" Xlsm bazaar.abuse.ch/sample/9a5bcc0… Dll bazaar.abuse.ch/sample/5831ebc… Url urlhaus.abuse.ch/url/1410469/ C2 ghjakappoppepeodkd[.website hteadclsspdkmdasd[.live cc @felixw3000 @58_158_177_102 @guelfoweb

1 17 23 0 2

Download Image

Unit 42 @Unit42_Intel

4 years ago

2021-06-21 (Monday) - #TA551 (#shathak) campaign uses English-template Word docs to push #Ursnif (#Gozi/#ISFB) - list of IOCs available at: bit.ly/3qfQ2fz

2 32 78 0 5

Download Image

Vadim Khrykov @BlackMatter23

4 years ago

#DARKSIDE affiliate UNC2465 insists you hunt for these registry key values changes😉 Use Windows EID 4657 (set SACL for it), or Sysmon EID 13 (check your config file) Great report from @FireEye👏 By the way, do you know the reason of underlined key modification? #threathunting

2 56 148 0 29

Download Image

Vadim Khrykov @BlackMatter23

4 years ago

"In order to protect, you must know the "Land" you're going to protect" - some unknown threat hunter🤔 Here are some useful books to read if you're/wanna be a good threat hunter (Windows edition): 1. Windows Security Monitoring (Andrei Miroshnikov) #threathunting #windows

5 97 333 0 132

Download Image

Florian Roth ⚡️ @cyb3rops

4 years ago

I often get the request that a SOC would like to test their detection capabilities regarding CobaltStrike activity I'll provide them with a solution that doesn't require CobaltStrike using some service installations, a NamedPipe creator & simulated beaconing etc. Stay tuned

17 212 797 0 120

Download Image

GitHub Security Lab @GHSecurityLab

4 years ago

Kill -9 your way to root on most modern Linux using @kevin_backhouse's latest polkit finding (CVE-2021-3560) github.blog/2021-06-10-pri…

10 586 1K 0 209

TryHackMe @RealTryHackMe

4 years ago

Half a million people are learning cyber security on TryHackMe! Retweet this & let us know why you signed up to TryHackMe? 5 random answers get $100 worth of Swag/Vouchers/Prizes🍀 Thank YOU for supporting us! 250k of you signed up in the last 6 months: blog.tryhackme.com/there-are-half…