Albert Priego

Humanoid - Staff Threat Researcher at SentinelOne.
Cat lover. Tweets are my own.

Hunt or be hunted.

[Albert Priego @AlbertPriego]

Not every day when you wake up you have the opportunity to discover a new APT nor do you have the opportunity to follow "very closely" its activity.

This time we have uncovered DarkPink, an APT that targets the APAC region -> https://t.co/2t6SAfgOsj

Lets keep it up 🔥🔥🔥

[Albert Priego @AlbertPriego]

🚨 Excited to speak at SINCON, Singapore’s top cybersecurity conference! 🚨

Join me & Pol Thill on Fri 23 May as we uncover APT Dark Pink via Telegram C2 message extraction.

Come say hi & grab a 🍻 after!

#SINCON2025 #CyberSecurity #ThreatIntel

[Infosec In the City (IIC) @Infosec_City]

🕵️ Unmasking Dark Pink: APAC’s Stealthy Threat Actor

Join @tr3gleos & @AlbertPriego as they reveal Dark Pink’s tactics & how TeleScout tracks attackers via Telegram C2.

📅 22-23 May 2025 | 📍 voco Orchard, SG
🎟️Conference Pass: https://t.co/QBYmHpOB7Y

#SINCON2025

[Albert Priego @AlbertPriego]

🔥 RootedCON 2025 – Here we go! 🔥

I’m thrilled to be back as a speaker at @rootedcon , and this time, I’ll be sharing the stage with my friend @tr3gleos. If last year was incredible, this year we’re taking it up a notch!

💡 Are you ready?

📅 Talk slot: March 6, 2025 | 14:00

[Florian Roth ⚡️ @cyb3rops]

this is us, guys

[Albert Priego @AlbertPriego]

@S4vitar Ramonware*

[Albert Priego @AlbertPriego]

@RoryCGO @noconname If we are talking about trends I would say that ML and the use of AI. There is a huge hype for that but I want to see the real world scenario from attackers and defenders perspective. I have my own guess about that, lets see what happens :)

[Albert Priego @AlbertPriego]

💻 @noconname 2024: Hasta pronto 💻
Ayer tuve la oportunidad de volver a presentar en No cON Name, la conferencia de hacking más antigua de España.

En esta edición compartí mi investigación de desmantelar por completo una botnet desconocida.

#CyberSecurity #ThreatIntelligence

[🥷🏼 No cON Name. Hacking & IT Security conference @noconname]

La última charla del día de #cybersecurity #track de #ncn2k24 viene de la mano de @AlbertPriego , a él le hubiera gustado contar con esta información cuando empezaba en #IR en “unveilling a new Botnet - Diving into the unknown”

[🥷🏼 No cON Name. Hacking & IT Security conference @noconname]

🚨#cybersecurity #track #ncn2k24 #talks

👾Unveiling a New Botnet - Diving into the Unknown (ES) _by @AlbertPriego

📆 November, 19th, 20th 2024

👇 👇We have tickets available 👇 👇
https://t.co/5X4GwlKWAE

🤳 with the support of @barcelonactiva

📌 Cibernàrium Nou Barris - Barcelona Activa

[🥷🏼 No cON Name. Hacking & IT Security conference @noconname]

🛡️🛡️🛡️🛡️🛡️🛡️🛡️🛡️🛡️🛡️🛡️
🎟️🎟️ tickets available !! 🎟️🎟️
🛡️🛡️🛡️🛡️🛡️🛡️🛡️🛡️🛡️🛡️🛡️

Event #ncn2k24

#cybersecurity track
#privacy track

Click here to get your PASS

👇🏼👇🏼👇🏼👇🏼
https://t.co/ng0jayBySL

Hurry up! Are running out

Here we go @barcelonactiva!

[t3ft3lb @t3ft3lb]

Susp #APT #SharpPanda
out.png (#RoyalRoad RTF)
https://t.co/b0tZCQXndc

WSWtmf.a (5t Downloader)
6dfba2e6ae44c0efc5835e0c5838c5ea
C2: hxxp://38.54.31[.]43/WindowsTime/update.php?Data=<encrypted_data>
Task: WindowsUpdateTaskMachine - rundll32.exe %TEMP%\WSWtmf.a StartW

@nao_sec

[Manuel Brito @cybermb_]

@CiberPoliES aportó una visión forense del #flipperZero

Me dejo muchas ponencias más en el tintero, incluso me quedaron pendientes la charlas de Sandra Bardón y @Seifreed trabajando en equipo y la de @AlbertPriego

[elhacker.NET @elhackernet]

Microsoft eliminará VBScript en Windows para bloquear la entrega de malware

↘️ VBScript (también conocido como Visual Basic Script o Microsoft Visual Basic Scripting Edition) sucesor de VBA
https://t.co/eySVQeGBck

[Albert Priego @AlbertPriego]

@cyb3rops I see strong fingers built by many F8 while debugging 😁

[Albert Priego @AlbertPriego]

@cyb3rops ur right but imho we should differenciate between redteam exercicies and APT/specific threat simulations since they've completely different approaches

[t3ft3lb @t3ft3lb]

Susp #APT #MustangPanda
html->js->msi
pdf00029620230426124841.html
https://t.co/iWEV3CoZQt
The msi file is downloaded from URL: hxxps://www.jcswcd[.]com/ghyms

[t3ft3lb @t3ft3lb]

I'm very glad to present my first huge report about #SideWinder #APT written in solo. I hope that this research will bring order to the attribution.
https://t.co/4W0mPxjfWe

[Albert Priego @AlbertPriego]

@JAMESWT_MHT @reecdeep Let's all contribute :)

Extracted and decrypted web injects:
https://t.co/SJDlEe0ysx

Enjoy! ❤️
@JAMESWT_MHT @reecdeep