Ben Humphrey

Security Researcher. Alumni of @BlackBerry, @NCCGroupInfosec, and @SophosLabs. Likes cats. Runs a bit. Tweets are mine. Views are mine.

[Ben Humphrey @BHumphrey01]

@JonathanMeiburg My first thought was food. I believe some birds can safely digest millipedes. But if it was food, I wouldn't expect it to remain in the nest for very long.

[Ben Humphrey @BHumphrey01]

Who knew!? @ShearwaterBand (p.s. I did)

[Ben Humphrey @BHumphrey01]

@Wayne501Mardle Leaving @Wayne501Mardle speechless! There's got to be some kind of internet prize for that 🤣 Right you are then. Back to throwing with my eyes open.

[Ben Humphrey @BHumphrey01]

@Wayne501Mardle Here's an odd one for you. I did a little experiment. Sighted to throw at T20, shut my eyes, then threw the dart. Everytime it lands near the T18. Is this revealing an issue with my throw, or should I stop being a loon and throw with my eyes open?

[Ben Humphrey @BHumphrey01]

It's here! It's here! Yay! @lomatheband

[BlackBerry @BlackBerry]

Check out our new open-source PE Tree Tool that significantly reduces the time and effort required to reverse engineer malware: https://t.co/Z653D1A9YZ #BHUSA

[Ben Humphrey @BHumphrey01]

@ShearwaterBand Yessss! I'd be immensely happy with anything, but particular favourites are (in no particular order): Pale Kings, Animal Life, Open Your Houses, Meridian, Black Eyes, North Col, Rooks, and Hail Mary.

[Ben Humphrey @BHumphrey01]

@lomatheband

[Ben Humphrey @BHumphrey01]

@felixw3000 Great work man! I get what people are saying about WMIs lack of synchronicity, but for an analysis tool that is less important. Love that you did it in powershell too :p

[OD @___OD___]

latest retefe code, easier to read here :> https://t.co/3nWaFUNgR3

[Ben Humphrey @BHumphrey01]

I did a blog!

[NCC Group Research & Technology @NCCGroupInfosec]

The Turla Group have been using their PNG Dropper again. In this post we take a detailed look at the PNG Dropper and its new payload - @BHumphrey01
https://t.co/jtwvrBUccH
#TurlaGroup #PNGDropper #Malware

[Ben Humphrey @BHumphrey01]

Indeed, malware. Indeed.

[Ben Humphrey @BHumphrey01]

@lomatheband Dragged across the floor, of course 😊

[Ben Humphrey @BHumphrey01]

@lomatheband more chairs

[Fox-IT @foxit]

Bokbot: The (re)birth of a banker. Connecting a new threat to an old threat actor group: Neverquest: https://t.co/coPUW5gYHn (by Fox-IT's @tehsyntx)

[Felix @felixw3000]

Published a new blog for @Sophos about a novel malware family we're calling #AdKoob. AdKoob steals its victim's passwords and seeks out information about the target’s ad purchasing history on Facebook. Go check it out: https://t.co/8uiDu6eHMG

[Ben Humphrey @BHumphrey01]

@campuscodi I wonder if it was a DDOS extortion email, like this: https://t.co/xcupqzDmVH

[jagchandra @jag_chandra]

RedAlert posing as VPN and utility apps outside play store, write up about campaign seen in last few months https://t.co/NLT8b9eQ7m

[Ben Humphrey @BHumphrey01]

Blog post on the seemingly new Sisfader RAT. It was being dropped by some RTF documents that were exploiting CVE-2017-8570. Kudos to @buffaloverflow for finding the documents! - https://t.co/ync87GI4E6

[Ben Humphrey @BHumphrey01]

@LinuxLady You were always one of the best lecturers there. Got me to where I am today. Good luck in your new challenge.