Ex-Unit 350: Elite cookie ops. Perfect bake temp. No ties to Unit 8200.
Joined April 2022
- Tweets696
- Following97
- Followers2K
- Likes864
WELL WELL WELL.... what did I tell you back in March. China has been up ConnectWise rear for a long time.
Also previous post:
nitter.gq/browsercookies/status/…
@aptwhatnow @silascutler
Oh… I wonder how this could have happened?! Lmaooo.
They’ve been so thoroughly #*%$’d for the last few years.
@aptwhatnow @silascutler
Annnd post:
nitter.gq/browsercookies/status/…
Thats right, 🇨🇳 [++] has/have been actively exploiting a vulnerability in SC for years which gave them full access to your systems. CW has decided to omit that from this post and the prior vuln that gave access.
@aptwhatnow @silascutler @campuscodi
It must be set at the INI layer (php.ini, conf.d, php_admin_value). People setting it via ini_set() in application bootstrap have done nothing, because the handler runs before the script.
It must be locked with php_admin_value or a .user.ini can re-enable it on FPM.
Oh… I wonder how this could have happened?! Lmaooo.
They’ve been so thoroughly #*%$’d for the last few years.
@aptwhatnow @silascutler
Vendor: "We uhh, found this vulnerability you should patch"
Cookie: Wait, you forgot to mention you discovered this due to active nation-state exploitation and <actor> may had/have full access & pivoted in your network (you're fucked).
🚨 NBD, just a patch! 🚨
@aptwhatnow
**Crowdstrike disrupted.
If David Lee didn’t show up for work or has a random family emergency, internet outage, or dog ate their computer… scope it.
A major step forward in disrupting North Korea’s illicit IT worker operations.
CrowdStrike is proud to have partnered with the FBI in identifying and disrupting U.S.-based laptop farms used by FAMOUS CHOLLIMA to infiltrate organizations, conceal operatives’ identities, and generate revenue for the regime.
Through threat intelligence and technical analysis, our Counter Adversary Operations team helped expose the infrastructure enabling these schemes.
This is the power of public-private collaboration in action. Together, we're raising the cost of adversary operations and turning intelligence into disruption.
Learn more about CrowdStrike's role: crowdstrike.com/en-us/blog/f…
Probably make more money if they took monkey fight donations attacking each other. I would watch this on PPV.
Cookie Connoisseur retweeted
‼️ BREAKING: DOJ and FBI have seized the infrastructure behind a Chinese state-sponsored group that infected thousands of routers, cameras, smart home gear, and used them to mask intrusions at NASA, the Federal Reserve, DOJ, Energy, HHS and NIH.
Attack traffic appeared to originate from devices local to each target. The campaign has been active since 2018.
There are the boys.
Two U.S. Nationals Sentenced for Facilitating Fraudulent Remote Information Technology Worker Schemes to Generate Revenue for the Democratic People’s Republic of Korea
“These sentences hold accountable U.S nationals who enabled North Korea’s illicit efforts to infiltrate U.S. networks and profit on the back of U.S. companies,” said Assistant Attorney General for National Security John A. Eisenberg. “These defendants helped North Korean ‘IT workers’ masquerade as legitimate employees, compromising U.S. corporate networks and helping generate revenue for a heavily sanctioned and rogue regime. The National Security Division will continue to pursue those who, through deception and cyber-enabled fraud, threaten our national security.”
🔗: justice.gov/opa/pr/two-us-na…
Vendor: "We uhh, found this vulnerability you should patch"
Cookie: Wait, you forgot to mention you discovered this due to active nation-state exploitation and <actor> may had/have full access & pivoted in your network (you're fucked).
🚨 NBD, just a patch! 🚨
@aptwhatnow
Thats right, 🇨🇳 [++] has/have been actively exploiting a vulnerability in SC for years which gave them full access to your systems. CW has decided to omit that from this post and the prior vuln that gave access.
@aptwhatnow @silascutler @campuscodi
Cookie Connoisseur retweeted
Contrary to the quoted tweet, @sexinfochina is in fact the admin of the Chinese darknet market FreeCity. Behind the handle is Xiao He, a Chinese national who is a prolific launderer of DPRK stolen funds, supporter of DPRK IT Worker ops, and pusher of fake viagra.
I am NOT the operator of ‘FreeCity’ or ANY darknet market. That tg account doesn't belong to me.
I’m a trader whose 10 BTC is frozen by @near_intents under shady “compliance review.” You’re smearing me to deflect from THEIR theft.
This is libel, not journalism. false accusations damaging reputation = criminal offense. Retract or lawyer up.
Crypto community: Demand proof before believing smears.
You're the real bad guy who started this whole thing. You're helping out the big shots behind the scenes, pretending to uphold blockchain justice all along.
So your money also comes from the crypto community? Can you guarantee that all your upstream funds are completely legal?
Check this out
💊
Contrary to the quoted tweet, @sexinfochina is in fact the admin of the Chinese darknet market FreeCity. Behind the handle is Xiao He, a Chinese national who is a prolific launderer of DPRK stolen funds, supporter of DPRK IT Worker ops, and pusher of fake viagra.
ICYMI - DPRK's training video on making Civil Engineering profiles to perform fraudulent CIV-E work.
#DRPK #kimhasabigfacemole @aptwhatnow
youtu.be/m4XmJUBorKU
Blast from the past
Our boy @AMangus7 - AKA "Tyler Minegar, Brock Patterson, Tretiak Sashka"
LMAO Bro, where did you find this X PFP? Boy be manifesting. Surprised Daddy lets you on X
I hope you find someone to help you with your english so your ITW frenz stop pickin' on you
Cookie Connoisseur retweeted
‼️🇰🇵 Another North Korean hacker using AI to alter his face caught while trying to infiltrate Bitso.
Meet "Sebastian," a software engineer from Colombia who can't speak Spanish. Strange, right?
Cookie Connoisseur retweeted
🇰🇵 Meet "Mateo" and "Alfredo", two young #Lazarus agents who thought it was a good idea to steal someone else's ID and resume to try to get a job with us.
🪶 We recorded them and found interesting data on how they operate.
⬇️ Read our article on the #QuetzalTeam Blog below!
