Math, bikes, building & burning stuff, Auth of "Ransomware: Defending Against Digital Extortion" Tweets are my own. https://nitter.gq/t.co/oTnWQlexLn #goon #BlackLivesMatter
Joined September 2013
- Tweets1.7K
- Following821
- Followers443
- Likes778
Tim is celebrating spooky season, all year long. retweeted
This is actually a crazy unknown fact from the early 90’s. It was his first modeling gig which led to his big break on Degrassi.
Tim is celebrating spooky season, all year long. retweeted
Balloongate is all the rage, but as @johnhultquist reminds us, don't forget about cyber espionage. wsj.com/articles/old-school-…
Tim is celebrating spooky season, all year long. retweeted
Effective threat hunting and incident response requires expert #threatintel coupled with precision and real-time visibility at scale. In this talk at @mWISEConference, Tanium's @SecuritySphynx and @itsstephaceves will explore with @Mandiant's @TimJGallo how we have joined forces.
Tim is celebrating spooky season, all year long. retweeted
Join myself and a couple other team members from the @Mandiant Security Validation's Behavior Research Team on September 15th, for our webinar where we will discuss Security Validation, and how we research and create content to test security controls!
brighttalk.com/webcast/7451/…
Tim is celebrating spooky season, all year long. retweeted
If you couldn’t make our @defcon workshop, all the materials are available on GitHub for you to enjoy at our own pace. See you next year!
github.com/BC-SECURITY/Begin…
Tim is celebrating spooky season, all year long. retweeted
Consider the effects of the GRU ammo sabotage now.
This is what Ukraine FM @DmytroKuleba told me last month here in Kyiv: Soviet/Russian-standard ammunition is — or already has — disappeared, been used up. politico.com/news/2022/05/10…
Tim is celebrating spooky season, all year long. retweeted
🚨🚨 We’re releasing research on a persistent #APT41 campaign targeting U.S. state governments from May ‘21 – Feb ‘22. Grab a biker jacket, studded belt, hair bleach and read our SUMmary of #APT41’s activities. Highlight 🧵
mandiant.com/resources/apt41…
Tim is celebrating spooky season, all year long. retweeted
#APT41 🔥🐉🐉
New Mandiant blog: APT41 🇨🇳🐉🐉 Targeting U.S. State Government Networks
Check out our new blog detailing an ongoing months-long campaign, updated anti-analysis techniques, a new zero-day vulnerability (CVE-2021-44207), and more:
mandiant.com/resources/apt41…
Tim is celebrating spooky season, all year long. retweeted
🚨🚨🚨 Ukraine and allies continuing to out Russian malign activities. Russia has been planning this operation for years, not months, years. There are multiple threads and vectors covert, overt, obvious and not so obvious. Keeping exposing and defanging.
Tim is celebrating spooky season, all year long. retweeted
This is rich….
Russian Foreign Minister Sergey Lavrov accuses the West of "informational terrorism."
1tv.ru/news/2022-02-17/42124…
Tim is celebrating spooky season, all year long. retweeted
Wow, this is bad....
SPAR: Supermarket chain forced to close stores due to ransomware attack news.sky.com/story/supermark… via @AlexMartin
Tim is celebrating spooky season, all year long. retweeted
New Mandiant Blog: "Kitten.gif" Meet the Sabbath (54bb47h) Ransomware Affiliate Program, Again - by @4real_br4nd4n and @tylabs mandiant.com/resources/sabba… #AdvancedPractices #MandiantConsulting #healthcare #education
Tim is celebrating spooky season, all year long. retweeted
Given the prevalence of stolen/cracked copies in this dataset that's an unsurprising number.
Many operators use Malleable Profiles and/or modify Resource Kit, but Artifact Kit (what affects BEACON DLLs) is used less: mandiant.com/resources/defin…
Across our dataset of 56k+ #CobaltStrike Beacon DLLs, the following PE compile timestamps account for ~90% of payloads.
Also note the timestamp on the export descriptor, as this is often not tampered with.
Find more insights in our (free) book!..
blogs.blackberry.com/en/2021…
Tim is celebrating spooky season, all year long. retweeted
We’re starting our search for Summer 2022 interns for the Financial Crime Analysis Team @Mandiant Intelligence. These are paid opportunities to work on the most impactful threats facing organizations today while working along side awesome people.
Tim is celebrating spooky season, all year long. retweeted
🚨🚨This is your friendly reminder, we (@Mandiant) are looking for a **researcher/threat hunter** to join us
- diving into cool tradecraft
- tracking down big game threat groups
What are you waiting for? 👀Research is a blast! (the team is cool too) jobs.smartrecruiters.com/Man…
Tim is celebrating spooky season, all year long. retweeted
Alright, folks, let's talk about Cobalt Strike!
mandiant.com/resources/defin…
(Sorry, red team pals. This one is for my defense buddies!) 🧵
Tim is celebrating spooky season, all year long. retweeted
#UNC2053 🤖 Bazarloader/backdoor bot accesses have been primarily used by #FIN12 during ransomware intrusion operations 👀
#SpookyRYUKy at Mandiant CDS
Tim is celebrating spooky season, all year long. retweeted
Ryuk ransomware operators previously tracked as #UNC1878 have been graduated to latest FIN group #FIN12.
Join #SpookyRYUKy talk at Mandiant CDS for details. blog and report here as well:
mandiant.com/resources/fin12…
