csgaee @csgaee

Malware researcher @EG_CERT | threat intelligence @nowhere_reallll csgaee.github.io Joined February 2019

Tweets

234
Followers

156
Following

2K
Likes

1K

Back Engineering Labs @BackEngineerLab

4 months ago

Given the recent events with VMPSoft DMCA'ing educational YouTube videos demonstrating how to unpack malware protected with VMProtect, we have decided to release a free to use unpacker which works for all versions of VMP 3.x including the most recent version. Simply sign…

15 134 627 79K 282

Download Image

Gynvael Coldwind @gynvael

6 months ago

Paged Out! #6 is out! pagedout.institute Totally free, 80 pages, best issue so far! 'nuff said, enjoy! (please RT to help spread out the news!)

1 105 220 28K 61

Download Image

Thomas Roccia 🤘 @fr0gger_

10 months ago

🤓 I was reading the fascinating report from @Volexity about the Nearest Neighbor Attack presented at @CYBERWARCON. To keep it documented, I created a quick overview to explain how works the attack to complement their blog post 👇 #threatintel #infosec

9 105 418 40K 235

Download Image

Tijme Gommers @tijme

a year ago

My @OrangeCon_nl talk is live! Elevate your knowledge: From COM Object Fundamentals To UAC Bypasses. A 25-minute crash course covering Tokens, Privileges, UAC, COM, and ultimately bypassing UAC! youtube.com/watch?v=481SI_…

6 121 434 33K 269

Download Image

Takahiro Haruyama @cci_forensics

a year ago

themida-unmutate - Static deobfuscator for Themida/WinLicense/Code Virtualizer's mutation-based obfuscation github.com/ergrelet/themi…

1 63 126 21K 69

Andreas Sfakianakis / @[email protected] @asfakian

2 years ago

FIRST CTI 2023 Video Recordings Playlist: youtube.com/playlist?list=… via @YouTube . Enjoy! #threatintel #cti #FOR578 #FIRSTCTI23 #FIRSTCTI

0 16 36 3K 20

Daniel López @0xDanielLopez

2 years ago

🎉 #TweetFeed is back! 🎉 After some months, I could bring it back to life again! Easily grab IOCs shared by the #infosec community at 𝕏 / Twitter: • URLs • Domains • IPs • SHA256 hashes • MD5 hashes All served in a FREE feed or via API. ➡️ tweetfeed.live

Thomas Roccia 🤘 @fr0gger_

2 years ago

6 43 163 37K 86

Download Image

4 39 117 16K 37

yed @frdfzi

2 years ago

Remote Monitoring and Management (RMM) tools commonly abuse by Threat actors. RMM_LOLBAS: docs.google.com/spreadsheets/d…

2 49 136 10K 63

Nick Carr @ItsReallyNick

2 years ago

Intrusions from skilled cyber crime operators will test your technology ... and your humans.

11 70 362 101K 87

Download Image

Gi7w0rm @Gi7w0rm

2 years ago

New blogpost: "The curious case of the 7777-Botnet". A covert botnet has been used to bruteforce Microsoft #Azure logins since June 2022 by abusing the "Microsoft Azure PowerShell" feature. Used to exclusively target C-Level employees. gi7w0rm.medium.com/the-curious-ca…

8 36 112 24K 22

Daniel @VirtualAllocEx

2 years ago

A question about all "Hells" and "Gates" in the context of x64 direct- and indirect syscalls. Are the following assignments correct? I am not 100% sure, let me know if something is missing or a statement is wrong. Hell's Gate: - Uses direct syscalls and retrieves SSN via…

2 21 103 19K 68

Mar_Pich @Mar_Pich

2 years ago

6 months ago, I started working on a way to better map the #ransomware ecosystem and its evolution, including rebrands.🔎 I am really happy to share this handmade cartography, which is based on @orangecyberdef resources, #OSINT and reverse engineering. ➡️ github.com/cert-orangecyb…

60 657 2K 343K 751

Download Image

Soufiane @S0ufi4n3

2 years ago

A TA going by the handle Spyboy is selling an AV/EDR killer that is allegedly capable of killing almost every AV/EDR on the market. streamable.com/ys07we streamable.com/h9n16x

24 149 507 173K 187

Download Image

Hussein Nasser @hnasr

2 years ago

What is the difference between the two urls? one has an @ and one doesn't. But also the first downloads version 15 of postgres from GitHub and the second one resolves to v15 dot zip domain which can also downloads a zip file that sure doesn't have postgres in it. You see,…

39 751 3K 540K 736

Download Image

Thomas Roccia 🤘 @fr0gger_

2 years ago

🤗I've written a book! Let me introduce you "Visual Threat Intelligence" You can register now to stay updated on its release and learn more about it in the link below. I really hope you'll like it! 🥹 #VisualThreatIntelligence #infosec #threatintel 👉store.securitybreak.io/threatintel

67 232 970 151K 286

Download Image

Will @BushidoToken

2 years ago

While doing my usual #CTI research stuff, I often find I refer to breach reports by an org's IR team because of their usefulness as case studies and/or TTXs. So, I threw up a #GitHub repo to collect these types of reports. PRs accepted 👨‍💻 github.com/BushidoUK/Brea…

2 76 241 28K 75

Will @BushidoToken

2 years ago

A classic case of when red teamer actually checks what’s happening on the real threat landscape…

2 6 76 25K 13

VirusTotal @virustotal

2 years ago

Introducing VirusTotal Code Insight: empowering threat analysis with generative AI. This tool is based on Sec-PaLM (LLM) and helps explaining behavior of suspicious scripts. Code Insight is available now for all our users! More details by @bquintero: blog.virustotal.com/2023/04/introd…

10 516 1K 269K 173

Download Image

Brandon Dalton @PartyD0lphin

2 years ago

Happy Friday everyone! Want a ProcMon for macOS? Ever wish you had your own Endpoint Security client you could task? Want to peer behind the macOS EDR curtain? Have a go and let us know what you think! github.com/redcanaryco/ma…