Tom Hall (@thall_sec) profile picture

Tom Hall

@thall_sec

Director, Cyber Incident Response and Remediation @PwC_UK. Ex Mandiant. All thoughts are my own.

 London, England
Joined November 2015
  • Tweets169
  • Following263
  • Followers456
7Media
Photo by Tom Hall (@thall_sec)Photo by Tom Hall (@thall_sec)Photo by Tom Hall (@thall_sec)Photo by Tom Hall (@thall_sec)Photo by Tom Hall (@thall_sec)Photo by Tom Hall (@thall_sec)Photo by Tom Hall (@thall_sec)
1/2 In my many conversations w/ CEOs, boards, & the C-suite, one thing is clear: they all face a difficult mission of addressing #cyber risk, but it is a team mission. It is for this reason that we are launching the C-suite playbook on #cybersecurity & #privacy, featuring the
1
3
12
Since 2017, PwC's #threatintel team has produced an annual 'Year in Retrospect' consolidation of the most impactful threat activity and trends observed over the past year across our incident response, Managed Cyber Defence, and threat research services around the world.
Image from Kris McConkey (@smoothimpact)
Image from Kris McConkey (@smoothimpact)
Image from Kris McConkey (@smoothimpact)
Image from Kris McConkey (@smoothimpact)
2
40
9
110
[Call for Information] Open consultation Computer Misuse Act 1990 - Ideas - Disclose.io Community Forum m.disclose.io/3y9pgJw via @robdyke
disclose.io | Vulnerability Disclosure Standards & Tools

disclose.io | Vulnerability Disclosure Standards & Tools

The open, vendor-neutral infrastructure that powers vulnerability disclosure and security reporting. Safe, simple, and standardized for everyone.

disclose.io
1
1
1
Join today's free #BlackHat Webcast at 11 am! Ransom demands are becoming larger, attackers smarter, & intrusions longer. We're revealing tradecraft we've seen ransomware threat actors employ across Europe this past year. Register here! - bit.ly/3v2QmAu
4
1
8
What have APT41 and APT27 been up to lately? Find out in @snozberries_au and @thall_sec's virtual talk at the 2021 Australian Cyber Conference Canberra: feye.io/3eopSU3
Image from Mandiant (part of Google Cloud) (@Mandiant)
3
8
Find out what APT41 & APT27 have been up to recently during @thall_sec and @snozberries_au's virtual talk at the 2021 Australian Cyber Conference Canberra. They'll share multiple examples of malware being used by each group: feye.io/3eopSU3
Image from Mandiant (part of Google Cloud) (@Mandiant)
6
12
Microsoft has detected multiple 0-day exploits being used to attack on-premises versions of Microsoft Exchange Server in limited and targeted attacks. Microsoft Threat Intelligence Center (MSTIC) attributes this campaign with high confidence to HAFNIUM. microsoft.com/security/blog/…
12
544
69
646
thread EU VACCINE SUPPLY 1. If, as seems likely, the AstraZeneca/EU Advanced Purchase Agreement (APA) is similar to the Curevac/EU APA, AstraZeneca's legal position in regard to delay and/or reduction of supply appears strong.
63
305
144
742
FireEye Mandiant is hiring an incident response consultant in Dubai, UAE. Check it out: jobs.smartrecruiters.com/Fir… #dfir #netsec @FireEye
2
1
#BHEU: Ransomware Attackers Professionalizing Operations with Partnership Platforms infosecurity-magazine.com/ne…
8
5
Tom Hall retweeted
ZDNET (@ZDNET) profile picture
ZDNET
@ZDNET9 Dec 2020
Ransomware gangs are getting faster at encrypting networks. That will make them harder to stop zd.net/3m0np2v by @dannyjpalmer
4
4
Mandiant UK & Ireland are recruiting for incident response, strategic, and red team consultants. Here's the IR link: linkedin.com/jobs/view/22312…
2
2
BREAKING - To help organizations identify compromised systems with CVE-2019-19781, @FireEye & @Citrix have released a tool that searches for indicators of compromise associated with attacker activity observed by @Mandiant fireeye.com/blog/products-an… github.com/fireeye/ioc-scann…
3
146
7
224
Next up @snozberries_au and @thall_sec from @Mandiant as they talk to our Summit about carefully selected case studies from Incident Response engagements that Mandiant have worked on over the last year. #THIREurope
Image from SANS Institute, EMEA (@SANSEMEA)
1
3
4
Here are some tips and tricks to perform #analysis with #MicrosoftExcel when presented with any type of data: feye.io/2PhSX5q
Image from Mandiant (part of Google Cloud) (@Mandiant)
1
5
1
10
Replying to @thall_sec
@thall_sec and I are speaking again next month at the @SANSEMEA Threat Hunting & IR summit in London covering APT41 and APT27. Going to have to re-think the intro music... Still no memes. sans.org/event/threat-huntin…
2
3
FYI I've added a 'Mnemonic Aid' column which could help you remember the expressions However, I am not native speaker and you could possibly find your personal mnemonics. Consider mine as suggestions.
Image from Florian Roth ⚡️ (@cyb3rops)
1
11
54
VirusTotal += FireEye blog.virustotal.com/2019/03/…
79
3
142
Check out FireEyes blog on #APT40 the guys that used #DADBOD and #LUNCHMONEY! fireeye.com/blog/threat-rese…
Mandiant Cybersecurity Consulting

Mandiant Cybersecurity Consulting

Transform cyber defense with Mandiant. Engage frontline experts for incident response, threat intelligence services, and cyber risk management.

cloud.google.com
18
33
Replying to @Mandiant
@Mandiant and @FireEye are are hiring an Industrial Control System Consultant here in Dubai, UAE. If you have the skills and desire, reach out to me and I can connect you with the right people. bit.ly/2Apena7
1
Load more