work time: defender fun time: malware hoarder/puzzle solver/capacity tester member of: @Cryptolaemus1 fan of: @hatching_io @sublime_sec
Joined January 2014
- Tweets3.6K
- Following257
- Followers1K
- Likes11.2K
dao ming si retweeted
Results of a wonderful partnership among LEA across the world to make it a better place! We have come far since this all started eating mealybugs(Emotet).🙂We are thankful for this partnership and to play a role in this to make a difference. We are a bit hungry though now... 🤔
dao ming si retweeted
⚠️ @CISAgov issued thirteen NEW public #ICS advisories. These advisories provide info about current security issues, vulnerabilities, & exploits surrounding ICS. More at cisa.gov/news-events/alerts/…
dao ming si retweeted
New blog with an update on the Socks5Systemz botnet with some interesting details! bitsight.com/blog/proxyam-po… #socks5systemz #proxyam
dao ming si retweeted
you can deploy verifiable coverage for this with @sublime_sec (for free), here’s the detection that’s been out for over a year (h/t @zoomequipd @ajpc500): sublime.security/feeds/core/…
🚨We’re seeing reports of a large-scale #spearphishing campaign targeting multiple sectors, including government and IT. A foreign threat actor is sending phishing emails with malicious RDP files to gain network access. Take proactive measures. More info: bit.ly/4fp9aQB
dao ming si retweeted
More #BruteRatel...
#BruteRatel #Latrodectus A New JS Nasty Obfuscation #TTPs & #IOCs - Multi-Line Comments🚨
[+] JS T1059.007
[+] Msiexec T1218.007
TA abuses multi-line (/* ,*/) comments to hide malcode and bypass detections - VT detections 20/62
Distro MSI IP: tp://95.164.17[.]212/BEST[.]msi
I wonder what #malware this is:
://193.42.11.9/main.exe
://176.111.174.140/PPGcgnyW.exe
://176.111.174.140/svchost.exe
dao ming si retweeted
Hello Latrodectus, are you ok? Hope you enjoyed op Endgame…
Check out my latest article to learn more about this malware and its tricks 🙂
bitsight.com/blog/latrodectu…
Amazing! If you haven't heard about Sublime before check it out and try it for free, on their cloud or you can get it off github and docker-compose !!
I’m extremely excited to announce that @sublime_sec has raised a $20M Series A led by @indexventures with participation from @DAlperovitch
I wrote about our journey from black box to open platform, and where we're headed:
sublime.security/blog/announ…
dao ming si retweeted
If you needed yet another reason not to trust VPN providers or proxy services...
Here Facebook partnered with a bunch of companies to have root certificates installed on people's phones so they could intercept other app's traffic.
storage.courtlistener.com/re…
