Ryan Olson (@ireo) profile picture

Ryan Olson

@ireo
 Washington, DC
Joined March 2007
  • Tweets580
  • Following687
  • Followers1K
54Media
Photo by Ryan Olson (@ireo)Photo by Ryan Olson (@ireo)Photo by Ryan Olson (@ireo)Photo by Ryan Olson (@ireo)Photo by Ryan Olson (@ireo)Photo by Ryan Olson (@ireo)Photo by Ryan Olson (@ireo)Photo by Ryan Olson (@ireo)Photo by Ryan Olson (@ireo)Photo by Ryan Olson (@ireo)
"Schools can't compete with a bank or a tech company as far as what they can buy and deploy," @PaloAltoNtwks @ireo tells @CBSNews. "That means that a threat actor who gets into that network is facing a lot fewer barriers to go in and launch their attack." cbsnews.com/news/vice-societ…
Ransomware group Vice Society targeted dozens of schools in 2022, new report finds

Ransomware group Vice Society targeted dozens of schools in 2022, new report finds

Researchers at Palo Alto Networks found cybercriminals attacked 40 education organizations in 2022, including 15 in the United States.

cbsnews.com
3
6
"Have an actual process that is validated and tested for how you authorize funds to leave your company,” “No funds should ever leave you just based off an email" - great advice from @Unit42_Intel Pete Renals on BEC: washingtonpost.com/politics/…
Analysis | This sneaky kind of cybercrime rules them all

Analysis | This sneaky kind of cybercrime rules them all

"Business email compromise" is the costliest internet crime.

washingtonpost.com
2
8
18
Ransomware actors sending thank you notes? Nigerian scammers on speed dial with Russian cybercriminal leaders? I had the opportunity to share these & other insights from @Unit42_Intel with @ISMG_News @mathewjschwartz during #RSAC2022: bankinfosecurity.com/total-b…
Total Business Email Compromise Losses Trump Ransomware

Total Business Email Compromise Losses Trump Ransomware

Ransomware continues to pummel organizations, with the average ransom payment reaching $925,000 so far this year, but the aggregate financial impact of business

bankinfosecurity.com
10
1
18
Ryan Olson retweeted
KellyKane (@KellyKane) profile picture
KellyKane@KellyKane9 Jun 2022
Getting ready for @wendiwhitmore’s interview with @euroinfosec @ISMG_News on what @Unit42_Intel is seeing in the threat landscape
Image from KellyKane (@KellyKane)
1
10
Ryan Olson retweeted
INTERPOL (@INTERPOL_HQ) profile picture
INTERPOL
@INTERPOL_HQ25 May 2022
💻 ❌ The suspected head of a global #cybercrime ring has been arrested by @PoliceNG! The operation involved police from 🇦🇺 🇨🇦 🇳🇬 🇺🇸 Plus the help of partners @GroupIB @PaloAltoNtwks @TrendMicro & @cybertoolbelt 🌐 All coordinated by @INTERPOL_Cyber interpol.int/News-and-Events…
Suspected head of cybercrime gang arrested in Nigeria

Suspected head of cybercrime gang arrested in Nigeria

The suspect’s arrest follows a year of international police collaboration, acting on information initially shared by private partners.

interpol.int
46
87
16
189
Following @Unit42_intel's great work, we're sharing our latest research, detection info, and hunting resources on DEV-0322 exploiting unpatched ZOHO ManageEngine ADSelfService Plus: msft.it/6018kTtKk
1
90
12
174
Scoop —> Cybersecurity researchers, with the help of the NSA, are exposing a suspected foreign hacking campaign that has targeted multiple US defense contractors. cnn.com/2021/11/07/politics/…
Hackers have breached organizations in defense and other sensitive sectors, security firm says |...

Hackers have breached organizations in defense and other sensitive sectors, security firm says |...

Suspected foreign hackers have breached nine organizations in the defense, energy, health care, technology and education sectors – and at least one of those organizations is in the US, according to...

cnn.com
13
163
12
337
Ryan Olson retweeted
Unit 42 (@Unit42_Intel) profile picture
Unit 42@Unit42_Intel20 Oct 2021
Want to join Unit 42? Check out our open positions! Product Line Manager - bit.ly/3BQjG0a Threat Intelligence Analyst (ARES) - bit.ly/3FPTrt4 Cloud Engineering Lead - bit.ly/2YRderv Sr Security Automation Engineer - bit.ly/2XfhMH8
Image from Unit 42 (@Unit42_Intel)
1
5
5
Ryan Olson retweeted
Unit 42 (@Unit42_Intel) profile picture
Unit 42@Unit42_Intel6 Oct 2021
Want to join Unit 42? We're looking for a threat intelligence analyst for our Adversary Readiness and Evaluation Strategies (ARES) team. bit.ly/3mqTmDk
Image from Unit 42 (@Unit42_Intel)
8
1
13
New research check it out!
Unit 42 (@Unit42_Intel) profile pictureUnit 42@Unit42_Intel24 Aug 2021
We've identified four emerging ransomware groups to watch: AvosLocker, Hive Ransomware, HelloKitty and LockBit 2.0. bit.ly/2XKYk4V
Image from Unit 42 (@Unit42_Intel)
2
3
Confirmed! Tao Yan (@Ga1ois) of Palo Alto Networks used a Race Condition bug to escalate to SYSTEM on a fully patched #Windows 10 box. He earns $40,000 and 4 Master of Pwn points. #Pwn2Own
9
5
40
The average cyber ransom paid last year nearly tripled to $312,493. Our new SVP of cyber consulting and threat intelligence @wendiwhitmore shares more new data from Unit 42 and explains what organizations can do to stop the surge in ransomware. bit.ly/3vCIS7F
Image from Palo Alto Networks (@PaloAltoNtwks)
7
2
11
Unsure of how to protect your org against the latest MS Exchange vulnerabilities? Follow this concise playbook from @Unit42_Intel to learn how to protect servers from recent vulnerabilities, what to do if you think you've been compromised, & more: unit42.paloaltonetworks.com/…
Remediation Steps for the Microsoft Exchange Server Vulnerabilities

Remediation Steps for the Microsoft Exchange Server Vulnerabilities

Follow this concise playbook to learn remediation steps for the Microsoft Exchange Server vulnerabilities and how they could affect your organization.

unit42.paloaltonetworks.com
6
1
8
Ryan Olson retweeted
Unit 42 (@Unit42_Intel) profile picture
Unit 42@Unit42_Intel9 Mar 2021
We estimate more than 125,000 Microsoft Exchange Servers remain unpatched. Follow this concise playbook to learn how to protect your organization. bit.ly/3ckiPsQ
Image from Unit 42 (@Unit42_Intel)
13
1
28
Ryan Olson retweeted
karttoon (@noottrak) profile picture
karttoon@noottrak8 Mar 2021
Wrote up some analysis last week on the #ChinaChopper shell being dropped during the Exchange attacks currently being carried out - unit42.paloaltonetworks.com/… The volume doubled over the weekend so some updated stats in tweets that follow
Analyzing Attacks Against Microsoft Exchange Server With China Chopper Webshells

Analyzing Attacks Against Microsoft Exchange Server With China Chopper Webshells

We analyze incidental artifacts of China Chopper webshell attacks against Microsoft Exchange Server, gaining insight into attackers' methodology.

unit42.paloaltonetworks.com
1
23
35
#BendyBear malware suspected to have compromised several East Asian governments through actions similar to BlackTech #WaterBear incidents in the past
Unit 42 (@Unit42_Intel) profile pictureUnit 42@Unit42_Intel9 Feb 2021
Today, we exposed "BendyBear," one of the most sophisticated, well-engineered and difficult-to-detect samples of shellcode employed by an APT, says the Unit 42 researcher who analyzed it. bit.ly/3aH1ABi
Image from Unit 42 (@Unit42_Intel)
8
70
2
102
Ryan Olson retweeted
Unit 42 (@Unit42_Intel) profile picture
Unit 42@Unit42_Intel23 Dec 2020
We’ve put together what we know about the timeline of the supply-chain attack on SolarWinds conducted by suspected nation-state operators that we are tracking as SolarStorm. bit.ly/38BTb18
Image from Unit 42 (@Unit42_Intel)
2
61
3
85
Ryan Olson retweeted
Unit 42 (@Unit42_Intel) profile picture
Unit 42@Unit42_Intel18 Dec 2020
We continue to monitor the details of the SolarStorm supply chain attack. We've updated our threat brief with additional resources, IOCs and methods for identifying compromised servers. bit.ly/34d8KdX
Image from Unit 42 (@Unit42_Intel)
7
8
Ryan Olson retweeted
karttoon (@noottrak) profile picture
karttoon@noottrak28 Oct 2020
Got a new job opening on my team! Remote Senior Threat Researcher gig at PANW with Unit 42: jobs.smartrecruiters.com/Pal…
5
24
5
41
Ryan Olson retweeted
Unit 42 (@Unit42_Intel) profile picture
Unit 42@Unit42_Intel26 Oct 2020
Get a walkthrough of how to examine Dridex infection traffic in Wireshark, and learn how to find certificate issuer data in the process. bit.ly/3mf3woK
Image from Unit 42 (@Unit42_Intel)
17
1
46
Load more