Dónnan

Threat intel analyst | keeping up to date with memes and threats around the world | Views and opinions are my own

[Dexerto @Dexerto]

A loyal dog has been credited with saving her missing 82-year-old owner with dementia

Cami kept her warm and helped rescuers locate her by barking whenever they called her name

[The Record From Recorded Future News @TheRecord_Media]

Investigators are probing how three separate hacking groups tied to China were able to exploit a SharePoint vulnerability at the same time https://t.co/KiyN6OQzAW

[Crunchyroll @Crunchyroll]

Don't forget.

[Dónnan @Cyb34_DO]

@vxunderground @GDATA Doesn't surprise me that Steam didn't bother with taking action, they've had a problem with the likes of infostealer malware on their platform for a good while now. It took them 6 days to get rid of a free to play game back in February that had the vidar stealer attached to it.

[BSidesNCL (Newcastle upon Tyne, UK) @bsidesncl]

Hotter than a laptop mining crypto in a sauna on the surface of Mercury…

The next transmission from BSides Newcastle is about to ignite!

@Cyb34_DO:
Do Or Do Not: The Ramification Of Misinformation

Tune in and access accurate intel here:
https://t.co/qMKQez5kcg

[Dónnan @Cyb34_DO]

@vxunderground

[Dónnan @Cyb34_DO]

@strawbetty_ ME2 is the goat btw, strap yourself in

[Edinburgh Napier University Security Society @enusec]

The next speaker for Le Tour Du Hack 2025 is Dónnan Mallon!

@Cyb34_DO is Napier Alumni and a CTI analyst. Fond of travel, and the odd bit of music here and there.

He'll be covering information stealers! What are they, and what impact have they had on global industries?

[Dónnan @Cyb34_DO]

@strawbetty_ Highly recommend 16 for the story and gameplay (especially if you like devil may cry), easily one of my faves since 7. I would also recommend Remake and Rebirth too!

[Dónnan @Cyb34_DO]

@IBRice101 Micheal Higgins is looking well for his age 😂

[Dónnan @Cyb34_DO]

It was wonderful getting to speak at this fantastic event! 😁

[BSidesNCL (Newcastle upon Tyne, UK) @bsidesncl]

Want to learn what a honeypot is and how they work? How about what the benefits are and how to get the best out of them? Find out from @Cyb34_DO here:
https://t.co/enz5WgetGc

Honeytrapper: The Attacker Strikes Back

#bsides #bsidesncl #InfosecCommunity

[Dónnan @Cyb34_DO]

@AbertayHackers Hey, noticed the Bio/Abstract has been mixed up between me and Jenny Highfield, could you look at that please?

[Gerard @ddsgerard]

Reach out for some sponsorship opportunities. Would love to get companies on board for the first ever @Hack_Glasgow

[Edinburgh Napier University Security Society @enusec]

We are thrilled to announce the dates for Le Tour Du Hack will be 10th-11th May 2025!

Join us for an unmissable weekend of cybersecurity talks, challenges, and networking as we celebrate 10 years of ENUSEC!

🗓️May 10-11, 2025
📍Craiglockhart Campus, 219 Colinton Road, EH14 1DJ

[Dónnan @Cyb34_DO]

Go and get sponsoring these folks! 👾

[Edinburgh Napier University Security Society @enusec]

It’s time to mark your calendars because this May, we’re celebrating 10 YEARS of ENUSEC with a special edition of Le Tour Du Hack! This year’s event will be unmissable. Make sure to spread the word!

For any sponsorship interest or queries please refer to https://t.co/f19pxGlEao

[BleepingComputer @BleepinComputer]

US Treasury Department breached through remote support platform - @LawrenceAbrams
https://t.co/slsdT8sUcY

https://t.co/slsdT8sUcY

[Dónnan @Cyb34_DO]

@vxunderground @Malcoreio :-)

[Dark Web Informer @DarkWebInformer]

🚨🚨🇬🇧Deloitte UK Has Been Claimed a Victim to Brain Cipher Ransomware

https://t.co/kr667u7FWN

📝The group claims to have acquired over 1 TB of the organization's data.

[Microsoft Threat Intelligence @MsftSecIntel]

Based on our findings and those reported by governments and other security vendors, Microsoft Threat Intelligence assesses the Russian nation-state actor we track as Secret Blizzard has used the tools and infrastructure of at least 6 other threat actors during the past 7 years.

[vx-underground @vxunderground]

Today @RockHudsonRock reported a Threat Actor operating under the moniker "Nam3L3ss" claimed to have compromised several large organizations via a MoveIT 0day exploit. Nam3L3ss is currently auctioning and/or distributing the data on the infamous Breached forum.

List of allegedly compromised organizations:
- Amazon 
- MetLife 
- Cardinal Health 
- HSBC 
- Fidelity
- U.S. Bank 
- HP 
- Canada Post 
- Delta Airlines 
- Applied Materials (AMAT) 
- Leidos 
- Charles Schwab 
- 3M 
- Lenovo 
- Bristol Myers Squibb
- Omnicom Group
- TIAA 
- Union Bank of Switzerland (UBS) 
- Westinghouse 
- Urban Outfitters (URBN)
- Rush University 
- British Telecom (BT)
- Firmenich 
- City National Bank (CNB) 
- McDonald’s 

Organizations we've confirmed to have been compromised:
- Amazon
- HSBC

Based on the data reviewed, the compromise for both these organizations took place around May 31st, 2023. None of the data (as we've seen thus far) contains customer information. The data for the organizations impacted appears to be HR and/or accountant related. We do not believe any of this information leaked to be 'mission critical', but because it exposes company internals (employees, floor plans, costs), this still poses a threat to organizations.

tl;dr we don't think Nam3L3ss is playing around. We think this is the real deal.

We are not sure how this person got their hands on the MoveIT 0day exploit, this was used frequently by cl0p ransomware group in the past. It was also briefly used by Lockbit ransomware group.

¯\_(ツ)_/¯