#IOCs

Suraj Oyewale (Jarus)

Jarushub

1/ Shell is a common feature in the career history of most of upstream oil executives in Nigeria. 3 things account for this:1, Shell had the largest footprint in oil

SophosLabs

SophosLabs

NEW RESEARCH: The attackers spreading #Conti have switched gears to a completely fileless attack method. (a thread)1/8 For the past several months, both SophosLabs and the Sophos Rapid Response team

Jon Gorenflo ✹ 🏴‍☠️🛡

flakpaket

So, I’ve seen folks pointing out that Dominion Voting Systems uses #SolarWinds.DVS definitely uses the SolarWinds Serv-U product; however, according to @AlexaCorse, they do not use the Orion product line.

SwiftOnSecurity

SwiftOnSecurity

I wonder if all the new cyber experts from the election are regretting their career choice yet. Oh you just got paged due to an executive account lockout, just keep

Andrew Brandt

threatresearch

For your lunchtime* long read this afternoon, I'd like to point you to some work I'm quite proud of that was published today.SophosLabs found what we now suspect may be

Lesley Carhart

hacks4pancakes

It is really important, in infosec and natsec, to understand if your adversary is making a tactical or a strategic choice. For instance, why are they moving laterally? Is it

Kevin Beaumont

GossiTheDog

There's a Trickbot variant called Bazar Backdoor which is now very active, and has good AV evasion across vendors at the moment. One to watch. As @martijn_grooten rightly notes in

🎄Ch33r10-m4$🎄

Ch33r10

ICYMI: @SANSInstitute Webcast on #SolarWinds #IOCs #CTI #ThreatIntel @MalwareJake That's a YES for APT #SolarWinds #CTI #ThreatIntel @SANSInstitute Webcast @MalwareJake Sandboxing wouldn't have helped High Confidence to evade detect

Lesley Carhart

hacks4pancakes

Just a reminder that you can’t build a successful threat hunting program to detect the APT indicators everyone is posting unless you actually build the capacity to threat hunt -

Somali News Updates

Somaliweyn_

Somalia’s first-ever licensing round for up to seven exploration blocks opened on August 4, 2020 and runs until March 12, 2021. The number of blocks on offer in the first

ESET research

ESETresearch

Last week, #ESETresearch published about latest GMERA campaigns against Mac users. Here is the current campaign: Malware is distributed on iaemr[.]org, registered a month ago. Perpetrators created a fake org.

Costin Raiu

craiu

1/9 The French National Cybersecurity Agency @ANSSI_FR released a report on Hades / Sandworm infecting Centreon servers with a PHP backdoor, followed by deploying the Exaramel Linux backdoor. Some notes:

Jake Williams

MalwareJake

Okay folks, let’s talk about SolarWinds.For those not familiar with it, SolarWinds is a network management system (NMS). It’s probably the most ubiquitous NMS out there, so we shouldn’t jump

Alison Weir 🏴󠁧󠁢󠁳󠁣󠁴󠁿 🟥 💚🤍💜

WeirAlison

A thread...1./ The IOCs decision to make no ruling on the participation of transwomen athletes in female sport before Tokyo2020 confirms that the IOC like many others have forgotten how

Christopher Glyer

cglyer

2020 was full of major cyber events. Here is an end of year #ff thread of some of the most impactful people and research that I leveraged in my work

Kim Zetter

KimZetter

I have report from Microsoft about SolarWinds hack, including IoCs. Excerpts in this thread: "Microsoft security researchers recently discovered a sophisticated attack where an adversary inserted malicious code into a

By continuing to use the site, you are consenting to the use of cookies as explained in our Cookie Policy to improve your experience.