Hello Friend. I'm here to protect you. Be kind.
Internet
Joined January 2018
- Tweets1.2K
- Following49
- Followers1.2K
- Likes246
Maelström (meɪlstrɒm) retweeted
RE Tip. If you want to decrypt obfuscated .NET strings, just call them from Powershell. E.g. this is xWorm config decryption.
File: virustotal.com/gui/file/cb0a…
Maelström (meɪlstrɒm) retweeted
The United States Department of Justice has charged a 55-year-old Cardiologist from Venezuela as the developer of Jigsaw Ransomware and Thanos Ransomware.
Thanos Ransomware Builder is available for download on vx-underground.
More info: justice.gov/usao-edny/pr/hac…
Maelström (meɪlstrɒm) retweeted
I love the Russian people. That is why I have to tell you the truth. Please watch and share.
Maelström (meɪlstrɒm) retweeted
Employees of Poland’s main cybersecurity agency have written an open letter expressing “great concern” over allegations a government minister forced their boss to quit over a private Facebook post.
pro.politico.eu/news/142439
Maelström (meɪlstrɒm) retweeted
If you want to use data from Feodo Tracker as indicators of compromise (IOCs) e.g. in your SIEM, MISP or whatever, use the following CSV:
👉 feodotracker.abuse.ch/downlo…
Maelström (meɪlstrɒm) retweeted
REMnux v7 release likely next week. Lots of new and exciting tools, including @FireEye capa. Thanks for this handy tool, @williballenthin, Moritz Raabe, and team!
Maelström (meɪlstrɒm) retweeted
Just made a blog post on #darkrat and how I exploited vulnerabilities in it to be able to take it over! Read here: fr3d.hk/blog/darkrat-hacking…
Maelström (meɪlstrɒm) retweeted
DDoS is not hacking
DDoS is not hacking
DDoS is not hacking
DDoS is not hacking
DDoS is not hacking
DDoS is not hacking
DDoS is not hacking
DDoS is not hacking
DDoS is not hacking
DDoS is not hacking
DDoS is not hacking
DDoS is not hacking
DDoS is not hacking
DDoS is not hacking
Maelström (meɪlstrɒm) retweeted
:: Phishing Admin Panel Hunting Thread ::
In this thread we will find ways to hunt and attribute phishing admin panels.
This is a continuation from my #phishing hunting thread released earlier this year. (xitter.gq/JCyberSec_/status/1130…)
Please retweet to knowledge share among others.
:: Phishing Hunting Thread ::
This is a thread about how to hunt and find #Phishing sites.
Retweets would be great to help spread the knowledge and please add your own techniques, ideas and suggestions.
Let's go hunting!
Maelström (meɪlstrɒm) retweeted
.@StackOverflow is currently offline. The entire dev community stopped his work
Maelström (meɪlstrɒm) retweeted
Hey #Infosec folks! If you aren't able to make it to #Defcon or #Blackhat and still want something fun to read here's a direct link to our #ScatteredCanary #BEC report. 10+ years of history into how #BEC grew. Enjoy! agari.com/cyber-intelligence…
Maelström (meɪlstrɒm) retweeted
10 PrivEsc - UAC Bypass detections/evtx were added to the ATT&CK-EVTX repo, panache_sysmon updated accordinly, below screenshot for my favorite UAC bypass, big thanks to UACME folks. #threathunting #dfir
github.com/sbousseaden/EVTX-…
Maelström (meɪlstrɒm) retweeted
This story, trending at #number1 @Forbes and @ForbesEurope, has been updated with further information from @VK_Intel, one of the researchers who reversed engineered #trickbot. I'm still awaiting a statement from @Microsoft.
#Windows10 #infosec #UPDATE
forbes.com/sites/daveywinder…
Maelström (meɪlstrɒm) retweeted
Just tried this out and it works! Next time you get a vendor email, reply with this: malicious.link/nosuchuser.ht… (code here: gist.github.com/mubix/43ea0c…) with a subject line of "Mail Delivery Subsystem - Address Not Found" (make sure to clear out the "RE:" and other subject line :)
Maelström (meɪlstrɒm) retweeted
How to invoke iex? dynamic call with $pshome #powershell #trick #malwareanalysis #incidentresponse #DFIR
