@DTCERT

Technical tweets for technical folks by Deutsche Telekom CERT, CTI, and DFIR. #dfir #cyber #cert #cti #TelekomSecurity

 Germany
telekom.com/impressum
Joined April 2014
  • Tweets241
  • Following44
  • Followers5.2K
75Media
Deutsche Telekom CERT retweeted
Robert Giczewski@lazy_daemonApr 22
This is what happens when you give our Red Team a bit of free time to do some research.. #CVE-2026-41651 github.security.telekom.com/…
14
1
52
5,165
Deutsche Telekom CERT retweeted
Virus Bulletin@virusbtn30 Aug 2023
Telekom Security's Fabian Marquardt (@marqufabi) analyses the DarkGate loader distributed via a new malspam campaign which uses stolen email threads to lure victims into clicking a hyperlink, which downloads the malware. github.security.telekom.com/…
22
2
49
7,890
Deutsche Telekom CERT retweeted
DFIR-IRIS@dfir_iris19 Aug 2023
🎉 Many thanks to @DTCERT - Deutsche Telekom Security GmbH for sponsoring IRIS and supporting open source projects! Thanks MT for making this happen! This greatly contributes to the sustainability of the project, ensuring it continues to evolve. 🚀
3
21
2,800
Deutsche Telekom CERT retweeted
Florian Roth ⚡️
@cyb3rops21 Jul 2023
Citrix NetScaler ADC CVE-2023-3519 resources -- Compromise Assessments @CISAgov advisory cisa.gov/sites/default/files… Deyda guide deyda.net/index.php/en/2023/… -- Vuln Checks Python github.com/telekom-security/… Nmap NSE script github.com/RootUp/PersonalSt… I'm gonna add more links in this🧵
5
147
3
357
67,416
Deutsche Telekom CERT retweeted
Gavin Henry@ghenry30 Jun 2023
Wow! Thank you so much to Deutsche Telekom for sponsoring the SentryPeer (sentrypeer.org) open source project. I wish there were more in the OSS ecosystem like you guys! github.com/telekom-security Much appreciated @marco_ochse for making this happen! #cybersecurity #voip

Protect your SIP Servers from bad actors

Protect your SIP Servers from bad actors at https://sentrypeer.org

sentrypeer.org
5
12
995
Deutsche Telekom CERT retweeted
BSI
@BSI_Bund6 Feb 2023
❗ Bei einem weltweit breit gestreuten Angriff wurden laut Medienberichten tausende Server, auf denen VMwares Virtualisierungslösung #ESXi zum Einsatz kommt, mit #Ransomware infiziert und verschlüsselt. Auch 🇩🇪 ist betroffen. 👉bsi.bund.de/dok/1084918 #DeutschlandDigitalSicherBSI
6
84
8
141
72,392
Deutsche Telekom CERT retweeted
Europol
@Europol26 Jan 2023
🚨 Cybercriminals stung as HIVE #ransomware infrastructure shut down. 🌍 The international operation involved authorities from 13 countries. 🔓 Law enforcement identified the decryption keys & shared them with many victims. Details ➡️ europol.europa.eu/media-pres… #EMPACT
41
403
49
895
226,267
Deutsche Telekom CERT retweeted
CERT-Bund
@certbund13 Dec 2022
❗️ #CERTWarnung ❗️ Eine kritische #Schwachstelle im SSL-VPN Dienst von #FortiOS ermöglicht es unautorisierten Angreifenden, Schadcode auf dem System oder Befehle auszuführen. Aktive Ausnutzung bekannt! #PatchNow Weitere Infos: bsi.bund.de/SharedDocs/Cyber…

Aktive Ausnutzung einer Schwachstelle in Fortinet SSL-VPN

Am Abend des 12.12.2022 (deutscher Zeit) veröffentlichte das Unternehmen Fortinet Informationen zu einer kritischen Schwachstelle im SSL-VPN-Dienst von FortiOS. Nach Angaben des Fortinet PSIRT...

bsi.bund.de
4
44
2
95
Deutsche Telekom CERT retweeted
Deutsche Telekom
@deutschetelekom9 Dec 2022
Wenn ein Unternehmensnetz gehackt wurde, wird bei uns das Team für digitale Forensik aktiv. 🕵️‍♂️ Klingt wie aus einem Krimi? Die #Netzgeschichten begeben sich auf Spurensuche. #Security #IncidentResponse

Netzgeschichten | Was ist Incident Response?

3
1
9
Microsoft has discovered Raspberry Robin activity establishing its role in a complex, interconnected malware ecosystem that facilitates human-operated ransomware. Our latest blog details active operations and links to other malware and threat actors: msft.it/6011djXFR

Raspberry Robin worm part of larger ecosystem facilitating pre-ransomware activity | Microsoft...

Microsoft has discovered recent activity indicating that the Raspberry Robin worm is part of a complex and interconnected malware ecosystem, with links to other malware families and alternate...

microsoft.com
3
181
20
334
Deutsche Telekom CERT retweeted
Gen Threat Labs
@GenThreatLabs22 Sep 2022
Deep dive into Roshtyak, the #RaspberryRobin DLL now on #AvastDecoded. Learn more about the lengths the Roshtyak backdoor takes to protect itself and about its core functionality in the blog post by Jan Vojtesek
3
19
30
Deutsche Telekom CERT retweeted
CERT-Bund
@certbund17 Dec 2021
🚨❗️ACHTUNG ❗️🚨 Neue Informationen zur #Schwachstelle CVE-2021-45046 in #log4j: Sie ermöglicht auch #RCE! Der CVSS-Score wurde von 3,7 auf 9,0 angehoben. Die Empfehlung direkt auf 2.16 zu aktualisieren bleibt bestehen: logging.apache.org/log4j/2.x…
4
64
15
96
Deutsche Telekom CERT retweeted
Jan@_zero_q1 Dec 2021
Some thoughts on past and recent cyber threats to telcos and ISPs: zeroqblog.wordpress.com/2021… #infosec #CyberSecurity

Past and Recent Threats to Telco Companies and Internet Service Providers

Telecommunication companies and ISPs have been in the focus of advanced attackers for a long time. At least 17 different threat actor groups have been identified to target telecommunication compani…

zeroqblog.wordpress.com
7
7
Load more