Odisseus (@_odisseus) header
Odisseus (@_odisseus) profile picture

Independent Security Researcher, who likes the story of "the legendary Greek hero" (cit.)

Joined July 2013
Photo by Odisseus (@_odisseus)Photo by Odisseus (@_odisseus)Photo by Odisseus (@_odisseus)Photo by Odisseus (@_odisseus)Photo by Odisseus (@_odisseus)Photo by Odisseus (@_odisseus)Photo by Odisseus (@_odisseus)Photo by Odisseus (@_odisseus)Photo by Odisseus (@_odisseus)Photo by Odisseus (@_odisseus)
"The Windows Antimalware Scan Interface (AMSI) is a versatile interface standard bla bla bla..." ๐Ÿ™„ With #AMSIkiller you can "patch" the first byte of the process changing it from JE to JMP: so it returns directly. Get your lifetime #AMSI bypass! ๐Ÿ˜‰ github.com/ZeroMemoryEx/Amsiโ€ฆ
41
136
13,804
โ€ผ๏ธ WARNING - A new critical cPanel flaw could let shared hosting customers run SQL as database root, bypassing database privilege boundaries. CVE-2026-58048 (CVSS 9.4) affects supported cPanel & WHM versions and WP Squared. In some configurations, impact may extend to OS-level compromise. Details: thehackernews.com/2026/08/neโ€ฆ
10
103
4
270
58,128
Odisseus retweeted
๐Ÿšจ The malware arrives as a legal file from a police department email and passes SPF, DKIM, and DMARC. What'sย inside: a Delphi/Inno Setup installer droppingย PhantomEnigma'sย JS backdoor that beacons, persists, and executes on command. ๐Ÿ‘จโ€๐Ÿ’ป Live detonation: app.any.run/tasks/1f6dd152-8โ€ฆ
1
28
77
6,540
๐Ÿค– awesome-claude-code โญ 44,846 stars Stop using Claude Code with default settings. Supercharge your terminal with the ultimate collection of custom skills, agents, and slash-commands. ๐Ÿ”— github.com/hesreallyhim/awesโ€ฆ ๐ŸŒ slopcodemonitor.ai/ #AI #MachineLearning
2
4
198
Ci vediamo a Bologna per due giornate dedicate alla cybersecurity, alla formazione e alla community! BIGLIETTI DISPONIBILI QUI: tickets.hackinbo.it/ #HiB26 #HiB #HiBusiness #Talk #SponsorshipOpportunity #CybersecurityEvent #HackInBo #Security #Bologna
๐Ÿค– Made with AI
2
5
434
Ex-BND (German Foreign Intelligence Service) deputy chief Arndt Freytag von Loringhoven received a message from fake Signal โ€œsupportโ€ asking for his PIN. He typed it in. His contacts then got a malicious link through his hijacked account. Heโ€™s a former NATO intelligence chief, and the author of a book called Putinโ€™s Attack on Germany, where he apparently covers Russian cyberattacks. He fell for a fake customer service message.
138
1,584
310
6,430
1,016,999
Odisseus retweeted
๐Ÿšจ ๐—ฆ๐—ฝ๐—ผ๐˜ ๐—œ๐˜ ๐—˜๐—ฎ๐—ฟ๐—น๐˜†: ๐—–๐—ฟ๐—ฒ๐—ฑ๐—ฒ๐—ป๐˜๐—ถ๐—ฎ๐—น ๐—ง๐—ต๐—ฒ๐—ณ๐˜ ๐—•๐—ฒ๐—ต๐—ถ๐—ป๐—ฑ ๐—™๐—ฎ๐—ธ๐—ฒ ๐—ฃ๐——๐—™๐˜€ Attackers disguise #phishing HTM/HTML email attachments as PDF files. In the observed case, pdf.htm displays a fake login page and sends entered credentials in JSON via HTTP POST to the Telegram Bot API, enabling account takeover and access to internal systems. Some samples use obfuscated scripts, making the exfiltration logic harder to spot โ—๏ธ โšก๏ธ #ANYRUN Sandbox exposed phishing behavior in under 60 seconds, revealing the outbound network activity, loaded scripts, and file contents, helping analysts accelerate triage and reduce unnecessary escalations. ๐ŸŽฃ See the analysis session and collect #IOCs to speed up detection and cut MTTR: app.any.run/tasks/3a6af151-cโ€ฆ ๐Ÿ” Find similar cases and pivot from IOCs using this TI Lookup search query: intelligence.any.run/analysiโ€ฆ ๐Ÿ‘จโ€๐Ÿ’ป Learn how #ANYRUN Sandbox helps SOC teams detect complex threats faster: any.run/features/?utm_sourceโ€ฆ #ExploreWithANYRUN
2
19
1
45
4,272
HackInBoยฎ Training โ€“ Spring 2026 โ€ข Advanced Binary Analysis & Reverse Engineering โ€ข Full-Stack Pentesting Lab (Hands-On + Lifetime LAB) โ€ข Digital Forensics for First Responders Info & registration: hackinbo.training #HackInBo #HiB26 #HiBTraining #Infosec #Training
3
2
3
707
Odisseus retweeted
A csv formatted list of #malspam campaigns that crossed my path in February to include subjects, #malware type, hashes, c2's, and email exfil addresses: gist.github.com/silence-is-bโ€ฆ #retrohunt
6
26
2,814
Odisseus retweeted
#reverseloader #xworm #opendir at: http://158.94.211\.63/dealer/
1
7
19
3,264
Odisseus retweeted
๐Ÿค– Stiamo iniziando a usare modelli di intelligenza artificiale anche nei sistemi della Pubblica Amministrazione. Per esempio per gestire documenti, PEC, pratiche. ๐Ÿ›กSe portiamo l'AI nei sistemi critici dobbiamo tenere bene in mente che non รจ nata per fare il guardiano.
๐Ÿ” Nuovo paper del CERT-AgID: quando la โ€œcoerenza narrativaโ€ dellโ€™IA diventa un rischio per i sistemi della PA Scopri di piรน ๐Ÿ‘‰ agid.gov.it/it/notizie/uso-dโ€ฆ
1
7
501
Odisseus retweeted
4
11
76
6,663
Parrhesepstein: piattaforma AI open source per analizzare i file Epstein. Testatela. 9 agenti investigativi autonomi, ricerca semantica su migliaia di documenti declassificati, mappa dei voli, grafi delle connessioni e analisi delle reti di influenza. Uno strumento costruito per esercitare la parrhesia: dire la veritร  al potere... perchรฉ la libertร  non รจ unโ€™opinione, รจ un dovere epistemologico. (grazie a @boni_castellane per il nome ) github.com/Pinperepette/parrโ€ฆ
60
230
21
669
48,045
Odisseus retweeted
Breaking Palantir was allegedly hacked. An AI agent was used to gain super-user access and hereโ€s what the hackers allegedly found: Peter Thiel and Alex Karp commit mass surveillance of world leaders and titans of industry on a massive scale. They have thousands of hours of transcribed and searchable conversations of Donald Trump, JD Vance and Elon Musk. They have backdoored the devices, cars and jets of world leaders and accumulated the biggest archive of blackmail material. Palantir is creating nuclear and bio weapon capabilities for Ukraine and is working closely with the CIA to defeat Russia. They believe they are one year away. They plan to achieve this by keeping Russia busy with meaningless peace negotiations. Palantir is responsible of the majority of Palestinian deaths in Gaza. They have developed the AI targeting for Israel. Palantir is an arm of the CIA and all data from international clients is copied into a CIA spy cloud. Palantir has become the most dangerous company in the world. If you work there you have the right to know that this is what Palentir AI is used for, without your knowledge. The Palentir data the hackers allegedly gathered will be given to Russia and/or China. I was chosen as a trusted partner for this publication. Iโ€™m not involved in the Palentir hack and I donโ€™t know the hackers. But I do know that the hack happened.
4,525
32,027
3,442
99,701
11,883,108
Save the date! HackInBoยฎ Spring & Winter Edition 2026 #HiB26 #HiB #HackInBo
3
5
491
๐Ÿ“ข#๐‘๐ž๐œ๐ฅ๐ฎ๐ญ๐š๐ฆ๐ž๐ง๐ญ๐จ: cerchiamo professionalitร  con competenze nel campo delle #tecnologieavanzate #sicurezzadigitale #terrorismo #OSINT #ecofin youtube.com/watch?v=w0DvcnP1โ€ฆ #SicurezzaNazionale Tutte le info qui๐Ÿ‘‰sicurezzanazionale.gov.it/coโ€ฆ Hai tempo ๐Ÿ๐ข๐ง๐จ ๐š๐ฅ ๐Ÿ๐ŸŽ ๐ฆ๐š๐ซ๐ณ๐จ
6
6
18
2,597
Odisseus retweeted
๐Ÿ“„ L'analisi si concentra esclusivamente su attivitร  che hanno interessato il territorio italiano, con particolare attenzione a quelle rivolte contro soggetti pubblici e privati afferenti alla propria constituency.
๐Ÿ‡ฎ๐Ÿ‡นReport CERT-AGID nel 2025 ๐Ÿ“ˆ Scenario delle minacce nel 2025 โžค #phishing a tema #PagoPA โžค sfruttamento di caselle #PEC โžค #Smishing per #malware โžค campagne #ClickFix โžค utilizzo dellโ€™ #IA per fini malevoli โžค #infostealer ๐Ÿ”— cert-agid.gov.it/news/reportโ€ฆ
1
3
249
Scaricate, gente, scaricate.... 7zip troianized installer. malwarebytes.com/blog/threatโ€ฆ
571
NON TRACCIABILE
Meshtastic รจ un sistema di comunicazione decentralizzata che funziona senza Internet, senza SIM e senza reti cellulari. Utilizza piccoli dispositivi LoRa (radio a lungo raggio) che comunicano tra loro creando una rete mesh: ogni dispositivo diventa un nodo ripetitore eโ€ฆโ€ฆ.
3
4
285
We added Trend Comparison to HackRisk.io and we are very proud of the result โคต๏ธ
๐ˆ๐๐“๐„๐‹๐‹๐ˆ๐†๐„๐๐‚๐„ ๐๐„๐„๐ƒ๐’ ๐‚๐Ž๐Œ๐๐€๐‘๐ˆ๐’๐Ž๐ โš–๏ธ As we step into 2026, cyber risk analysis needs more than isolated data points โ€” it requires context and comparison. Today, HackRisk introduces ๐“๐ซ๐ž๐ง๐ ๐‚๐จ๐ฆ๐ฉ๐š๐ซ๐ข๐ฌ๐จ๐ง, a ๐ง๐ž๐ฐ ๐ฉ๐ซ๐ž๐ฆ๐ข๐ฎ๐ฆ ๐œ๐š๐ฉ๐š๐›๐ข๐ฅ๐ข๐ญ๐ฒ designed for professionals who rely on data to make strategic decisions. With Trend Comparison, you can place ๐ญ๐ฐ๐จ ๐๐ข๐Ÿ๐Ÿ๐ž๐ซ๐ž๐ง๐ญ ๐ญ๐ซ๐ž๐ง๐๐ฌ ๐ฌ๐ข๐๐ž ๐›๐ฒ ๐ฌ๐ข๐๐ž and analyse how the threat landscape evolves across: ๐Ÿ•’ ๐“๐ข๐ฆ๐ž๐Ÿ๐ซ๐š๐ฆ๐ž๐ฌ ๐Ÿญ ๐’๐ž๐œ๐ญ๐จ๐ซ๐ฌ ๐ŸŒ ๐‚๐จ๐ฎ๐ง๐ญ๐ซ๐ข๐ž๐ฌ ๐Ÿงฉ ๐“๐ž๐œ๐ก๐ง๐ข๐ช๐ฎ๐ž๐ฌ ๐Ÿ“Š ๐’๐ž๐ฏ๐ž๐ซ๐ข๐ญ๐ฒ ๐ฅ๐ž๐ฏ๐ž๐ฅ๐ฌ The free Dashboard continues to provide a high-level snapshot of the last 3 months, while our premium subscribers unlock ๐๐ž๐ฉ๐ญ๐ก, ๐ก๐ข๐ฌ๐ญ๐จ๐ซ๐ข๐œ๐š๐ฅ ๐œ๐จ๐ง๐ญ๐ž๐ฑ๐ญ ๐š๐ง๐ ๐š๐œ๐ญ๐ข๐จ๐ง๐š๐›๐ฅ๐ž ๐ข๐ง๐ญ๐ž๐ฅ๐ฅ๐ข๐ ๐ž๐ง๐œ๐ž. Discover our Trend Comparison now: ๐Ÿ‘‰ hackrisk.io
3
4
270