David Andro Rivera (@ITSecAnalyst) profile picture

David Andro Rivera

@ITSecAnalyst

CISSP, GCIH, Information Security Professional, Incident Respomse, Athlete, Gamer. #Security,#Infosec, #Hacking, #Technology.

Joined July 2010
  • Tweets4.4K
  • Following529
  • Followers376
#MagicRAT is the latest #malware from the well-known #LazarusGroup (a suspected North Korean APT). More on this new threat and Lazarus Group's overall goals here cs.co/6010MM7ng
Image from Cisco Talos Intelligence Group (@TalosSecurity)
3
54
5
113
David Andro Rivera retweeted
Troy Hunt (@troyhunt) profile picture
Troy Hunt
@troyhunt4 Sep 2022
Well this is going to be interesting - has @tiktok_us been breached? – at Gold Coast, Queensland
This quoted post is unavailable.
Try viewing anyway · View on X
12
367
119
1,043
David Andro Rivera retweeted
F-Secure (@FSecure) profile picture
F-Secure
@FSecure5 Sep 2022
#TikTok has allegedly suffered a data breach 🆘 Now is a good time to turn on 2-step verification if you haven't yet. Here's how you can secure your account: support.tiktok.com/en/safety…
Image from F-Secure (@FSecure)
1
11
2
12
David Andro Rivera retweeted
vx-underground (@vxunderground) profile picture
vx-underground
@vxunderground24 Aug 2022
Leaked documents online show the purchase (and documentation of) an $8,000,000 iOS Remote Code Execution 0day exploit
Image from vx-underground (@vxunderground)
Image from vx-underground (@vxunderground)
Image from vx-underground (@vxunderground)
56
930
132
3,473
David Andro Rivera retweeted
BleepingComputer (@BleepinComputer) profile picture
BleepingComputer
@BleepinComputer8 Aug 2022
Twilio discloses data breach after SMS phishing attack on employees - @serghei bleepingcomputer.com/news/se…
Twilio discloses data breach after SMS phishing attack on employees

Twilio discloses data breach after SMS phishing attack on employees

Cloud communications company Twilio says some of its customers' data was accessed by attackers who breached internal systems after stealing employee credentials in an SMS phishing attack.

bleepingcomputer.com
5
49
8
87
David Andro Rivera retweeted
BleepingComputer (@BleepinComputer) profile picture
BleepingComputer
@BleepinComputer8 Aug 2022
Chinese hackers use new Windows malware to backdoor govt, defense orgs - @serghei bleepingcomputer.com/news/se…
Chinese hackers use new Windows malware to backdoor govt, defense orgs

Chinese hackers use new Windows malware to backdoor govt, defense orgs

An extensive series of attacks detected in January used new Windows malware to backdoor government entities and organizations in the defense industry from several countries in Eastern Europe.

bleepingcomputer.com
1
47
4
76
David Andro Rivera retweeted
BleepingComputer (@BleepinComputer) profile picture
BleepingComputer
@BleepinComputer10 Jun 2022
New PACMAN hardware attack targets Macs with Apple M1 CPUs - @serghei bleepingcomputer.com/news/se…
New PACMAN hardware attack targets Macs with Apple M1 CPUs

New PACMAN hardware attack targets Macs with Apple M1 CPUs

A new hardware attack targeting Pointer Authentication in Apple M1 CPUs with speculative execution enables attackers to gain arbitrary code execution on Mac systems.

bleepingcomputer.com
1
60
4
88
David Andro Rivera retweeted
Unit 42 (@Unit42_Intel) profile picture
Unit 42@Unit42_Intel10 Jun 2022
2022-06-09 (Thursday) - #TA578 #Bumblebee malware infection led to #CobaltStrike activity on 23.82.141[.]226:443 using zupeyico[.]com - IOCs available at: bit.ly/3tuGY9v
Image from Unit 42 (@Unit42_Intel)
47
103
msrc.microsoft.com/update-gu…
David Andro Rivera retweeted
whanep (@whanepnft) profile picture
whanep@whanepnft4 May 2022
Here’s my entry for the @nftmakerio art contest: Lost Relic. 🪨 GM Space Frens! 🖖 #NFTCommunity #CNFT #nftart #NFTartists #CardanoNFT #1millionNFTs
6
12
57
David Andro Rivera retweeted
NMKR (@nmkr_io) profile picture
NMKR
@nmkr_io3 May 2022
NFT-MAKER FAN ART CONTEST 🏆 Win a @spacebudzNFT 🖼 Get it featured in a collection in the upcoming NFT-MAKER Marketplace! 🗓Deadline: May 4th 🗳 Submit here: forms.gle/ixwBCNPaUPmTL73x9 👨‍🎨 Artist: @whanepnft #Cardano #NFTCommunity #1millionNFTs
7
13
42
microsoft.com/security/blog/…
Dismantling ZLoader: How malicious ads led to disabled security tools and ransomware | Microsoft...

Dismantling ZLoader: How malicious ads led to disabled security tools and ransomware | Microsoft...

Microsoft took action against the ZLoader trojan by working with telecommunications providers around the world to disrupt key ZLoader infrastructure. In this blog, we detail the various characteris...

microsoft.com
Stealer Malware Intelligence Report - Government 1,753,658 credentials of 49K+ government sites have been leaked from users infected with Stealer malware. *The users may include government users or public users of gov public services* TOP 10,000 sites: bit.ly/3sA7f6s
Image from Fusion Intelligence Center @ StealthMole (@stealthmole_int)
Image from Fusion Intelligence Center @ StealthMole (@stealthmole_int)
30
207
140
365
David Andro Rivera retweeted
Samir (@SBousseaden) profile picture
Samir@SBousseaden9 Apr 2022
a quick mind map where I tried to group all previously shared Lsass cred access detection traces using Windows Logs (via sparce tweets) github.com/sbousseaden/Slide… Example of logs can be found here github.com/sbousseaden/EVTX-…
Image from Samir (@SBousseaden)
1
124
1
352
David Andro Rivera retweeted
BleepingComputer (@BleepinComputer) profile picture
BleepingComputer
@BleepinComputer1 Apr 2022
Critical GitLab vulnerability lets attackers take over accounts - @serghei bleepingcomputer.com/news/se…

Critical GitLab vulnerability lets attackers take over accounts

GitLab has addressed a critical severity vulnerability that could allow remote attackers to take over user accounts using hardcoded passwords.

bleepingcomputer.com
2
141
16
227
Google has so little money that they had to fill this page with ads to the point of only having 1 actual result. One result on the entire page. The rest is ads.
Image from ᴅᴀɴɪᴇʟ ᴍɪᴇssʟᴇʀ 🛡️ (@DanielMiessler)
38
53
8
371
David Andro Rivera retweeted
Bill Demirkapi (@BillDemirkapi) profile picture
Bill Demirkapi
@BillDemirkapi28 Mar 2022
New documents for the Okta breach: I have obtained copies of the Mandiant report detailing the embarrassing Sitel/SYKES breach timeline and the methodology of the LAPSUS$ group. 1/N xitter.gq/BillDemirkapi/status/1…
Image from Bill Demirkapi (@BillDemirkapi)
Image from Bill Demirkapi (@BillDemirkapi)
Bill Demirkapi (@BillDemirkapi) profile pictureBill Demirkapi
@BillDemirkapi22 Mar 2022
The LAPSUS$ ransomware group has claimed to breach Okta sharing the following images from internal systems.
Image from Bill Demirkapi (@BillDemirkapi)
Image from Bill Demirkapi (@BillDemirkapi)
Image from Bill Demirkapi (@BillDemirkapi)
Image from Bill Demirkapi (@BillDemirkapi)
64
867
250
2,458
David Andro Rivera retweeted
Microsoft Security (@msftsecurity) profile picture
Microsoft Security
@msftsecurity22 Mar 2022
Microsoft Security has been tracking criminal actor DEV-0537 (LAPSUS$) targeting organizations with data exfiltration and destructive attacks - including Microsoft. Analysis and guidance in our latest blog: microsoft.com/security/blog/…
DEV-0537 criminal actor targeting organizations for data exfiltration and destruction | Microsoft...

DEV-0537 criminal actor targeting organizations for data exfiltration and destruction | Microsoft...

The activity we have observed has been attributed to a threat group that Microsoft tracks as DEV-0537, also known as LAPSUS$. DEV-0537 is known for using a pure extortion and destruction model...

microsoft.com
14
567
43
1,040
David Andro Rivera retweeted
briankrebs (@briankrebs) profile picture
briankrebs
@briankrebs1 Mar 2022
Spent past 2 days reading 14 months worth of leaked chats from the Conti ransomware group (so you don't have to). Today's Part I focuses on the group's internal efforts to evade actions by law enforcement & intel agencies. This is a bottomless gold mine. krebsonsecurity.com/2022/03/…
20
440
24
1,239
David Andro Rivera retweeted
The Hacker News (@TheHackersNews) profile picture
The Hacker News
@TheHackersNews16 Feb 2022
VMware issues security patches for multiple high-severity vulnerabilities affecting ESXi, Workstation, Fusion, and Cloud Foundation products. ✅CVE-2021-22040 ✅CVE-2021-22041 ✅CVE-2021-22042 ✅CVE-2021-22043 ✅CVE-2021-22050 ✅CVE-2022-22945 thehackernews.com/2022/02/vm… #infosec

VMware Issues Security Patches for High-Severity Flaws Affecting Multiple Products

VMware releases security patch updates for multiple high-severity vulnerabilities affecting ESXi, Workstation, Fusion, and Cloud Foundation products.

thehackernews.com
82
1
134
Load more