
Another #ITSec guy. Incident Response and RE | GREM | Plague doctor to malware and scums, curing the pest since 2013 w/ #MalwareMustDie
OSINT
Joined August 2009
- Tweets5.9K
- Following527
- Followers1.3K
- Likes494
๐๐๐๐๐๐ retweeted
A #Splunk Threat Research Team (STRT) blog for #PhantomStealer analysis including Loader techniques, TTP's and Splunk Detections. I hope it helps. ๐
blog:
splunk.com/en_us/blog/securiโฆ
๐๐๐๐๐๐ retweeted
#Udemy data breach confirmed.
After refusing to pay the ransom, hackers released data of 1.4M users, including personal and financial details.
We @DarkEntryAms launched a lookup tool so you can check if youโre affected:
darkentry.net/latest-breacheโฆ
#DataBreach #Ransomware
๐๐๐๐๐๐ retweeted
Finding vulnerabilities in DJI drones: reverse engineering, firmware decryption, and dynamic analysis (fuzzing). ๐จโ๐ปโฏโฏ๐ธ๐ซจ๐ชฒ
More details on:
LinkedIn: linkedin.com/posts/dlaskov_dโฆ
Substack: it4sec.substack.com/p/findinโฆ
๐๐๐๐๐๐ retweeted
Just wondering how many of us are actually rebooting (turning off and on again) our mobile phone devices everyday?
#MalwareMustDie #Poll
19%I do
71%I donโt
10%I donโt know..
42 votes โข Final results ๐๐๐๐๐๐ retweeted
This strange tweet got >25k retweets. The author sounds confident, and he uses lots of hex and jargon. There are red flags though... like what's up with the DEI stuff, and who says "stack trace dump"? Let's take a closer look... ๐งต1/n
๐๐๐๐๐๐ retweeted
Crowdstrike Analysis:
It was a NULL pointer from the memory unsafe C++ language.
Since I am a professional C++ programmer, let me decode this stack trace dump for you.
๐๐๐๐๐๐ retweeted
#Blog: I re-posted my older #APT #PoisonIvy analysis in #MMD blog before it becomes /dev/null :)
blog.malwaremustdie.org/2024โฆ
#MalwareMustDie!
๐๐๐๐๐๐ retweeted
#Xbox isnโt abandoning consoles anytime soon.
In a graph @Microsoft Gamingโs CEO, Phil Spencer, used in the FTC hearing relating to the acquisition of Activision Blizzard King, they showed the potential growth of the Microsoft Gaming brand from 2023 to 2030.
This chart showed a few things that may be surprising to some gamers:
1. Barely anyone is using Xboxโs Cloud Gaming (Beta)โฆ.yet.
- If youโre like us, youโre subscribed to Game Pass Ultimate and youโve probably tried playing games using Xboxโs Cloud Gaming feature: a part of the Game Pass Ultimate service that allows you to play most of the games on Game Pass without downloading the game locally, from Minecraft to Starfield, on your Xbox, phone, tablet, laptop, desktop, and even your TV.
Itโs one of the coolest additions to the gaming space inโฆmaybe ever. When I was a kid I dreamed of being able to play my console quality games on the go, and while there are many ways to do so, few are as easy to pick up and play as Cloud Gaming (and almost none offer as many accessible games without having to download at least an update, if not the entire game).
(We broke the news that you donโt need a new Samsung TV with the Game Pass smart TV app to play on a smart TV, in the Post we made awhile back, which we dropped in the Replies for those of you that are interested).
2. Thatโs going to change and TONS of people are going to be playing via Cloud Gaming in the future, which means they plan on Game Pass growingโฆA LOT.
- From the small blue sliver on the left hand of the chart, we can clearly see there arenโt a lot of people using Cloud Gaming today, however Microsoft Gaming seems to think that will change.
In fact, they anticipate that by 2030 more people will be engaging with the Xbox/Game Pass brand via Cloud Gaming than through a laptop or desktop computer. By looking at the chart, it looks like anywhere from 20% to 30% of Xbox/Game Pass gamers could be playing from the Cloud in 2030.
3. Those of us that thought Cloud Gaming would be where EVERYONE games in the near(ish) future, and that consoles wouldnโt be a thing, were wrong.
- While Cloud Gaming might grow in the next six (6) years and some change, consoles arenโt going anywhere. The chart clearly indicates that while a much larger percentage of gamers will engage with the brand in new ways, console gaming is here to stay, and will only grow, holistically ๐ฎ
Many people, including some on our team, thought consoles would be much less important 2-5 years from now. And while they might take up a smaller percentage of the market due to Cloud Gamingโs growth, it looks like Xbox isnโt going anywhere and that weโre going to be gaming locally on consoles for much longer than some progressive gamers think.
Happy that consoles are here to stay? Excited for Microsoft to invest more in their Cloud Gaming service? โ๏ธ
What are your thoughts, as a customer of Xbox and gamer?
๐๐๐๐๐๐ retweeted
Thank you for all of friends for the amazing support along these 11years+.
If you are following our #malwaremustdie/#MMD's twitter/x account @malwaremustdie up to now & got disconnected please follow this official account to keep in touch. -- MMD
๐๐๐๐๐๐ retweeted
"HHHash: HTTP Headers Hashing (HHHash) is a technique used to create a fingerprint of an HTTP server based on the headers it returns."
#infosec #pentest #redteam
github.com/adulau/HHHash
๐๐๐๐๐๐ retweeted
The Forum of Incident Response and Security Teams (#FIRST) is proud to announce the official release of #CVSS v4.0 #ThePublicPreview. The latest information on CVSS v4.0 can be found at first.org/cvss/v4-0/ #FIRSTCON23
๐๐๐๐๐๐ retweeted
Want to learn how to automatically harvest IOCs available online. Let me demonstrate using exclusively the Maltego Standard Transforms!
This means this works for all version of Maltego, Community Edition included!๐งตโฌ (1/9)
๐๐๐๐๐๐ retweeted
The wait is over ๐ฅณ I completed some major updates for VMwareCloak, a Powershell script that sanitizes VMware Workstation VM's from some of the common VM-detection techniques used by #malware! Try it out and let me know how it works for you ๐
github.com/d4rksystem/VMwareโฆ
Is malware detecting your VirtualBox VM's? Is pafish giving you trouble? Try out the latest release of my PowerShell-based tool VBoxCloak! A quick and dirty way to hide your VM's from some common VM-detection techniques. VMware coming soon! ๐ฅณ
github.com/d4rksystem/VBoxClโฆ
๐๐๐๐๐๐ retweeted
๐จ We discovered 3 vulnerabilities in Microsoft Message Queuing (MSMQ) service, including #QueueJumper (CVE-2023-21554), a Critical vulnerability that could allow unauthorized attackers to remotely execute code.
More details in our blog ๐ research.checkpoint.com/2023โฆ
#PatchNow







































