Hardy CyberSec

All things #IT, #InformationSecurity, #infosec, #CyberSecurity, #cryptocurrencies, #Cryptography, #hackers, #hacking and #Privacy with related news & updates.

[Hardy CyberSec @CyberLoz]

@OctopusEnergy have been sent an OHM.. been through the setup procedure, left for a couple for days and do not see any meter readings. Went through the hard reset procedure and had the same result. OHM is connected to WiFi and located within 1m of meter. Help?

[Hardy CyberSec @CyberLoz]

@H3KTlC The book "PowerShell In A Month Of Lunches" is where I started with PS many moons ago.

[Hardy CyberSec @CyberLoz]

Soo #WindowsDefender latest version now ships with file download capability. Not present in previous versions. Downloads are scanned by #Defender though, so it at least prevented #PowerSploit download in testing. #Microsoft #CyberSecurity #InfoSec

[Digital_Monet @aRtAGGI]

New CTI joint today! These boys are back. TA413 is not meant to be a new group. Just our name for a CN #APT that has been written about quite a bit. Thanks to all the researchers covering #ExileRat before us. Wouldn’t have attrib’d #Sepulcher without it.
https://t.co/5XT389qkoA

[ANY.RUN @anyrun_app]

New maldoc which contains a loader inside of it starts delivering #Zloader. To avoid detection in automated sandboxes this maldoc uses macros on close. It won't avoid ANYRUN's interactivity!
Also, payload doesn't downloads to systems with Windows 7. https://t.co/LmhpN1v0Ql

[Hardy CyberSec @CyberLoz]

@blueteamzone @BleepinComputer Domain is still visible in the image..

[BleepingComputer @BleepinComputer]

This week, Conti has released a data leak site that they use to publish stolen data to further extort their victims. This site is currently listing 26 different victims, some of them well-known.

[Hardy CyberSec @CyberLoz]

@BleepinComputer But the domain is still present in the browser tab header 😉

[Hardy CyberSec @CyberLoz]

@stwater The issue in S41, S43 Chesterfield area is showing as resolved on your site tracker. However, there is still no supply reaching S43 Brimington area?

[Hardy CyberSec @CyberLoz]

Dell EMC breach.. not sounding good! #Dell #EMC #DellEMC

[Hardy CyberSec @CyberLoz]

@leadmill korn falling away from me

[Hardy CyberSec @CyberLoz]

@leadmill in the air tonight - phil collins

[Hardy CyberSec @CyberLoz]

@leadmill amity affliction deaths hand

[reecDeep @reecdeep]

🔐#FTCODE #malware #ransomware #maldoc v1018.1 italy 🇮🇹

=>p://power.hagertyquote.com/?need=stdgeyt&vid=dpec16&29916

c2: p://denni.dennishughesagency.com/

@JAMESWT_MHT @malwrhunterteam @matte_lodi @merlos1977 @gigafio

#infosec #malwareanalysis #Powershell #ThreatIntel #Threat

[Hardy CyberSec @CyberLoz]

@cglyer @shodanhq @censysio Nice of you to reveal the detection capability for specific tooling. Makes developing potential avoidance techniques much easier.

[Hardy CyberSec @CyberLoz]

One full weekend @Steel_Con ticket available, cannot attend due to unforeseen circumstances. £25 first come first serve basis. #SteelCon #SteelCon2019

[Charles @CharlesDardaman]

SandboxEscaper has now dropped 2 more Windows 10 exploits this morning including this video of one of them running.

[Florian Roth ⚡️ @cyb3rops]

RDP Vuln CVE-2019-0708 aka #BlueKeep Detection

What do we have?

Sigma Rules
https://t.co/NsiT3Uc6gN
https://t.co/4E2kuZiTbD
by @markus_neis

Suricata Rule
https://t.co/RFw7HP64hy
by @edeca

Scanner
https://t.co/FZyyldwS5z
by @JaGoTu & @zerosum0x0

[Hardy CyberSec @CyberLoz]

https://t.co/j1yXyqRKVP #ZeroDay #0day #hacker #unpatched #vulnerability #Microsoft #Windows #cybersecurity #infosec