@benji_potter

Founder of FIRCY. ex AWS security leader. Ambassador for #NoMoreRansom. Tweeting cyber and cloud.

 Adelaide, South Australia
fircy.co
Joined August 2015
  • Tweets320
  • Following218
  • Followers405
22Media
As someone involved in the AWS offsec space, I want to share why I strongly do NOT recommend the HackTricks AWS Red Team Expert course. The author of it is a plagiarist, stealing content from other creators and is directly profiting off of it through sponsorships. A 🧵
7
74
12
321
119,829
Full house this morning at @stoneandchalk @AustCyber breakfast ft @benji_potter @YSGovRiskSec @duariv @Fivecast @CyberCX @ISACA_Adelaide @CyberOpsAU @DIIS_SA exploring the #growth of the Australian #Cyber Industry #STARTUPWEEK #SOUTHSTART
1
3
11
Ben Potter retweeted
Joseph Cox
@josephfcox2 Nov 2021
New: underground trade of bots that steal your 2FA codes. Bot places convincing automated call to target. Victim enters code, gets fed to hacker instantly. Dramatically lowers the barrier of entry for bypassing 2FA, no social engineering skills needed vice.com/en/article/y3vz5k/b…

The Booming Underground Market for Bots That Steal Your 2FA Codes

The bots convincingly and effortlessly help hackers break into Coinbase, Amazon, PayPal, and bank accounts.

vice.com
7
281
65
525
Ben Potter retweeted
Raj Samani@Raj_Samani1 Nov 2021
In our latest blog myself and @ChristiaanBeek explore the increased use of #socialmedia as a vector to target individuals. Includes examples of recent nation-state activity: mcafee.com/blogs/enterprise/… #cybersecurity #infosec
12
11
RDP is back! The most common attack vector for #ransomware is RDP again according to @coveware coveware.com/blog/2021/7/23/… #malware #cybersecurity #infosec
3
68
3
80
Activity from the REVIL group now detected in 44 countries, updated IoCs, threat advisories now available: mcafee.com/enterprise/en-us/… H/T @Jeffrey_Sman @Glacius_ @_Fritto_ @tim_hux @John_Fokker #malware #cybersecurity
11
13
Some things never change - "The top five passwords used by the RDP servers are '123456', '123', 'P@ssw0rd', '1234', and 'Password1'." bleepingcomputer.com/news/se… #ransomware #malware #cybersecurity
15
2
26
Ben Potter retweeted
x0rz@x0rz8 Apr 2021
How your unpatched server managed to survive through the week
4
133
10
555
Ben Potter retweeted
Raj Samani@Raj_Samani8 Feb 2021
Possible remorse or fear of law enforcement? Either way good news that there is one less #ransomware variant with the Ziggy operators now shutting down and providing a decryptor: bleepingcomputer.com/news/se… #malware #cybersecurity #infosec
12
9
Data leak 💾 💧
Soldier of FORTRAN - Mild Dystopian Future Vibes@mainframed76728 Dec 2020
Air gap saves another network
14
35
4
339
"This killswitch will affect new and previous SUNBURST infections by disabling SUNBURST deployments that are still beaconing to avsvmcloud[.]com" bleepingcomputer.com/news/se… #malware #cybersecurity
1
17
16
AWS CloudTrail provides more granular control of data event logging through advanced event selectors AWS CloudTrail now provides more granular control of data event logging with advanced event selectors. Data events provide visibility into the data... aws.amazon.com/about-aws/wha…
5
3
27
Finally! #cloudformation templates can now natively support 500 resources, 200 params, 200 outputs, 200 mappings, and a max template size passed from S3 to 1MB. More details here: go.aws/35mgMRO go.aws/3m72zPc
4
33
21
128
Replying to @ben11kehoe
every little '*' in your IAM policies is like a venomous spider, just waiting to strike. Squish them out now!
2
11
I've started working on a list of the resource types on AWS that can be made public: github.com/SummitRoute/aws_e…

GitHub - SummitRoute/aws_exposable_resources: Resource types that can be publicly exposed on AWS

Resource types that can be publicly exposed on AWS - SummitRoute/aws_exposable_resources

github.com
11
59
3
170
"Ryuk #ransomware raised $61.26m in ransoms over a 1yr period, Crysis/Dharma raised $24.48m in a nearly 3yr period, and in a significant drop-off, Bitpaymer was the third most impactful variant with $8.04m raised in a two-year period" searchsecurity.techtarget.co… #malware #cybercrime

FBI: $144 million in ransomware payments made over 6 years | TechTa...

How much money has been spent paying ransomware ransoms? Well, at least between Oct. 1, 2013 and Nov. 7, 2019, the answer is approximately $144.35 million, according to FBI supervisory special agen...

techtarget.com
12
11
Who said #cybercrime was hard? "Attackers can purchase a one month license to the RAT for as little as $65 or $175 for a three-month license, which provides the following advertised features" bleepingcomputer.com/news/se… #malware #cybersecurity #infosec
2
16
1
14
A very worrying change in tactics with Revil #ransomware operators threatening to publish data unless ransom paid even citing #GDPR as further motivation: bleepingcomputer.com/news/se… cc @BrianHonan @John_Fokker #malware #cybercrime
2
6
1
10
s3:Put* is more dangerous than it seems. At first glance you think it just means it grants the ability to put objects (ie. write), but it also grants: - s3:PutBucketAcl or s3:PutBucketPolicy for anonymous read/write/list 1/2
3
45
5
170
Now you can easily integrate third-party network & security appliances in your VPC with Amazon VPC Ingress Routing. #reInvent amzn.to/361txj4
2
35
9
64
Load more