051R15

Cyber Security Researcher who loves Extreme Sports
Opinions Are My Own 👻

[051R15 @051R15]

(sha256)8a7301d08ac6ecace450b2fd8d229a0bd1c965f79fda59d012db34f24a31efc9
(md5)6bf7aa83cf545928183a9937ba65a949

[051R15 @051R15]

The developer of this malware speaks Korean very fluently. Match the English spelling to the Korean keyboard and you'll get the perfect Korean cuss word that meaning "Give my regards to your mother." 🫢

[051R15 @051R15]

You can get the sample here
https://t.co/Lrukcp0b3V

[051R15 @051R15]

It’s too honest.
Trojan management platform 🤔

[051R15 @051R15]

Good to see you again ;)

hxxp://www.yonseidentist[.]com/wordpress/wp-includes/js/canonet.ne.jp

#phishing #JP #yonsei #korea

[051R15 @051R15]

The phishing site impersonating the UK gov gateway is parasitic on a server of a community in South Korea.

#PhishingKit
🎣hxxps://www.yonseidentist[.]com/govuk5.zip
#md5
#️⃣ed85a9c41c23d45a8c3e1a05c47f49de
#Phishing #UK #Yonsei #Korea

[051R15 @051R15]

It's interesting to see a global player covering the file format-based anti-analysis techniques KFSI reported on last October. It's a shame FSI report isn't in their reference. 😋
(KFSI report) https://t.co/4gwDaZIm6r
https://t.co/AsN3mrDhhd

[051R15 @051R15]

People do not claim any car companies or government, or parliament to make cars or laws related to them that guarantee people's lives. However, without hesitation, they call "garbage" the clunky programs that must be installed on PCs when using financial services. 🤔

[051R15 @051R15]

@mrgonzalez I survived! I survived! 😇

[051R15 @051R15]

Do guys know this whisky? Shanghai Classic Color 12 years old... I can't any info about it on Goolgle...

[051R15 @051R15]

oh my goodness it’s not a whisky it’s just old traditional alcohol that taste like vinegar 😉

[051R15 @051R15]

KFSI(Korea Financial Security Institute) published a new report. This Masscan Ransomware💸 Threat Analysis Report was written by my teammate(@darb0ng). The funny thing, their activities have been observed only in Korea. 🇰🇷

[Minhee Lee @darb0ng]

#Masscan #Ransomware 🔒 Threat Analysis Report
(Operation MaRS) - FSI 2022 Cyber Intelligence Report
✔️ Store encryption(&decryption)-related information separately
✔️ Add ".masscan" to the file extension

👉 https://t.co/N1vIXME5v3

#FSI #Intelligence #MasscanRansomware

[051R15 @051R15]

Thank you for sharing the script. I'm testing this script on my IDA with several samples. Yeah, it should improve more and more. But one thing is clear, we can't go back. 🤖🤖🤖

[Ivan Kwiatkowski @JusticeRage]

I wrote an IDA plugin that queries #ChatGPT and explains decompiled functions. It's still very bleeding edge, but you can find the code here and try it out:
https://t.co/lEelTimzvt

(Yes, the video was performed on a very basic case for simplicity's sake.)

[CHA Minseok(Jacky) @mstoned7]

KRCert warned of an attack on the subject of the Itaewon crowd crush accident. As expected they try to attack the Itaewon crowd crush accident as a theme.
They are taking advantage of heartbreaking events. https://t.co/taVYEuDDYY (Korean)

[051R15 @051R15]

The English article link has a problem. Please, try this link.

https://t.co/WKTsOA8TXY

[051R15 @051R15]

I found exciting things when I was analyzing a malicious APK lately. So, I wrote a report with one of my juniors. The report was published in Korean and English. If you point out content, I respect&agree with your opinion.
(Kor)https://t.co/ulPtdaDZv8
(Eng)https://t.co/WGKXhSYaps

[051R15 @051R15]

@_jsoo_ OMG! I'm so sorry. Try this link, please.
https://t.co/WKTsOA8TXY

[051R15 @051R15]

@ninoseki What's that? 😅 Is it a can of Udon broth or real Udon flavor beer?

[051R15 @051R15]

I'm not sure what's going on but I guess a new phisher appeared who like cryptocurrency, can use Korean well. The adversary is targeting users of the MetaMask in Korea since two days ago. 🥸

[051R15 @051R15]

Happy holidays and Merry Christmas 🎅🎄