Pinned Tweet
I put up a github repo for #emotet c2 configs that are extracted by @CapeSandbox. I'm scraping every 10 minutes and only new/unique configs are added to the repository. Maybe these IOCs can be helpful to fellow defenders Β―\_(γ)_/Β― github.com/ring0x0/emotet-coβ¦
One of my best friends launched cybermechanics.pro/ today, a cyber security resource to bring an awareness and fundraising effort towards NETs, a very rare neuroendocrine cancer that his wife was diagnosed with. 1/2
Shout out to @Namecheap for one of the fastest takedowns I've ever seen. I wish they were all that fast!
RIP @VK_Intel π’ Gone way too soon. You'll always be one of the brightest people that I've ever had the pleasure of working with. You will be missed by so many. Rest easy my friendβΉοΈ
7
SOC: #spring4shell requires Spring MVC framework of JDK9 and above. If the JDK version is less than equal to 8, it is not affected.
Client: You told us to upgrade our Java!
SOC: ....
ππ
΄π
Άπ
Άπ
Έπ
΄ retweeted
You can detect the exploitation of Windows InstallerFileTakeOver LPE CVE-2021-41379 with the published PoC with events from the 'Application' Eventlog
Search for EventID 1033 and the keyword 'test pkg'
ππ
΄π
Άπ
Άπ
Έπ
΄ retweeted
π₯π"Not Yet Kameraden!"- Conti ransomware is back again and up & running
1β£"We are up and running, our infra is intact and we are going full throttle"
2β£"The reported 25kk which we "made since July" is straight-up BS - we've made around 300kk at least (suck this Twitter-hobos)"
