joeychen @joeychennoGG

malware researcher, reverse engineer. A conference speaker and trainer such as HITB, VirusBulltin, CodeBlue, HITCON, DeepIntel, etc. Joined September 2014

Tweets

58
Followers

119
Following

271
Likes

747

HITBSecConf @HITBSecConf

a year ago

#HITB2024BKK COMMSEC: CoralRaider Targets Victims Data and Social Media Accounts - Joey Chen & Chetan Raghuprasad - conference.hitb.org/hitbsecconf202…

0 3 5 903 0

nao_sec @nao_sec

a year ago

New blog post! "Building Casper's Shadow". We discovered and researched the #ShadowPad builder. See how ShadowPad is built 😎👻 nao-sec.org/2024/06/buildi…

0 50 112 13K 29

Download Image

Cisco Talos researchers Chetan Raghuprasad & Joey Che discovered a financially motivated threat actor targeting users in several Asian & Southeast Asian countries. CoralRaider focuses on stealing victims’ credentials, financial data & social media accounts blog.talosintelligence.com/coralraider-ta…

0 20 49 5K 11

Download Image

saintX @saintX

2 years ago

淮南锋川网络科技有限责任公司 submitted the binary to MS to be signed 96170614bbd02223dc79cec12afb6b11004c8edb8f3de91f78a6fc54d0844622

Threat Intelligence @threatintel

2 years ago

淮南锋川网络科技有限责任公司 submitted the binary to MS to be signed 96170614bbd02223dc79cec12afb6b11004c8edb8f3de91f78a6fc54d0844622

0 7 21 9K 4

Download Image

0 4 6 1K 0

ラック公式 @lac_security

3 years ago

2022年6月に新たな攻撃者グループによる日本組織を狙った「サプライチェーン攻撃」を確認しました。攻撃で利用された4つのマルウェアを中心に、その機能や背後に潜む攻撃者像について紹介しています。ぜひご活用ください。 lac.co.jp/lacwatch/repor… #株式会社ラック　 #サプライチェーン攻撃

0 36 93 0 8

joeychen @joeychennoGG

3 years ago

fd8c53670c2dcea06abfe49b364875643f6c499ca77c6a49a63a1ae4364c03c5 d011130defd8b988ab78043b30a9f7e0cada5751064b3975a19f4de92d2c0025 Interesting pdb strings

1 1 5 0 0

Download Image

SentinelOne @SentinelOne

3 years ago

🔥New from #SentinelLabs! Chinese-aligned APT group Moshen Dragon caught side-loading #malware through multiple #AV products to infect telecoms sector. By Joey Chen and @AmitaiBs3. Read the blog: sentinelone.com/labs/moshen-dr… #moshendragon #cybersecurity #plugx #shadowpad

1 11 15 0 1

joeychen @joeychennoGG

4 years ago

Verifying myself: I am joey_chen222 on Keybase.io. jt8RW_nlKBlThsZc4H2NnzUdrFD4uWYnfwxj / keybase.io/joey_chen222/s…

0 0 1 0 0

780th Military Intelligence Brigade (Cyber) @780thC

4 years ago

Chinese espionage tool exploits vulnerabilities in 58 widely used websites... Fifty-seven of the sites are popular Chinese portals, while the last is the site for US newspaper, the New York Times. therecord.media/chinese-espion… via @TheRecord_Media

4 40 50 0 5

joeychen @joeychennoGG

4 years ago

sd-magazine.com/securite-numer…

0 0 1 0 0

No Context Russia @Russia_NC

5 years ago

66 3K 11K 0 618

Download Video

Tony @t0nynot

5 years ago

Check out our latest research about similarities between ShadowPad and PlugX APT-backdoors. We analysed malware samples from our customer's infected PCs and some other ones and highlithed some common features news.drweb.com/show/?i=14048&…

1 7 18 0 0

Trend Micro Research @TrendMicroRSRCH

5 years ago

New post: The U.S. Justice Department charged 5 members of a Chinese state-sponsored group known as #APT41 for hacking over 100 institutions worldwide. Last May, @TrendMicro also connected the group to ransomware attacks on Taiwanese organizations. trendmicro.com/en_us/research…

0 4 6 0 0

Trend Micro Research @TrendMicroRSRCH

5 years ago

.@TrendMicro cyberthreat researcher @joeychennoGG breaks down #TropicTrooper 's use of USBferry at #HITCON2020. More about this topic: bit.ly/2zubhEb

0 5 6 0 1

Download Image

Norbert Tihanyi, PhD @TihanyiNorbert

5 years ago

My new AMSI bypass script based on Matt Graeber @mattifestation 'amsiInitFailed' script. With a little math 0/59 AV detects as malicious in 2020. Happy pentesting. @kmkz_security

6 141 341 0 62

Download Image

joeychen @joeychennoGG

5 years ago

medium.com/@dimazarno/byp…

0 0 0 0 1

JPCERT/CC @jpcert_en

5 years ago

New Blog Post: Evolution of Malware LODEINFO ^YU blogs.jpcert.or.jp/en/2020/06/evo…

1 26 45 0 3

Autumn Good @autumn_good_35

5 years ago

『DarkHotel has been linked to both Higaisa and StarCruft, all of them have some connection to South Korea in one way or another.』🤔 Deep-dive: The DarkHotel APT blog.bushidotoken.net/2020/06/deep-d…

0 4 8 0 0

joeychen @joeychennoGG

5 years ago

amazing project

Cyril Diagne @cyrildiagne

5 years ago

amazing project

46 604 2K 0 201

Download Video

0 0 2 0 1

blackorbird @blackorbird

5 years ago

#Darkhotel #APT #infection Ramsay: A cyber‑espionage toolkit tailored for air‑gapped networks The Spreader is highly aggressive in its propagation mechanism and any PE executables residing in the targeted drives would be candidates for infection. report: welivesecurity.com/2020/05/13/ram…