Filippo Sitzia

European with strong Italian accent | Sardinian | Working in Cyber Security | CoderDojo Mentor | Tweets are my personal opinions.

[Josh Allman @xorJosh]

@HuntressLabs
A Google AD is serving a malicious WinSCP Python installer, resulting in rapid lateral movement 🧵

1. Google AD -> gaweeweb[.]com -> winccp[.]net

[Unit 42 @Unit42_Intel]

2023-10-12 (Thursday): The latest example of #DarkGate malware distributed through Microsoft Teams. Attacker poses as target organization's CEO and sends victim a Teams invite. Message contains password-protected zip archive. IOCs available at https://t.co/Eq58fmW5G3

[BleepingComputer @BleepinComputer]

Air Europa data breach: Customers warned to cancel credit cards - @serghei
https://t.co/LEFb5rk8UV

https://t.co/LEFb5rk8UV

[BleepingComputer @BleepinComputer]

Fake WinRAR proof-of-concept exploit drops VenomRAT malware - @billtoulas
https://t.co/wknJpot4uO

[Filippo Sitzia @FilippoSitzia]

@carlolobrano @RedHat Bellissima notizia! Bravo!

[Filippo Sitzia @FilippoSitzia]

@carlolobrano Do it! Do it!

[Christiaan Beek @ChristiaanBeek]

⁦@TrellixLabs⁩ The Bug Report - March 2022 Edition, discussing some of the latest CVE’s: https://t.co/C8c4HWHlEX

[Filippo Sitzia @FilippoSitzia]

@Raj_Samani @Trellix @McAfee @ChristiaanBeek @John_Fokker @spovolny @FlynnPartyof5 All the best Raj! It's been awesome to work with you. Thanks for being an inspiration for all of us!

[BleepingComputer @BleepinComputer]

Malware now using NVIDIA's stolen code signing certificates - @LawrenceAbrams
https://t.co/1IQxjHR9Mr

[BleepingComputer @BleepinComputer]

BlackCat (ALPHV) ransomware linked to BlackMatter, DarkSide gangs - @LawrenceAbrams
https://t.co/4UI6PkGaCn

[BleepingComputer @BleepinComputer]

Canada's foreign affairs ministry hacked, some services down - @Ax_Sharma
https://t.co/15cCYVAZl5

[Raj Samani @Raj_Samani]

Our latest @TrellixLabs research takes a close look at the pseudo #ransomware campaign targeting the Ukraine: https://t.co/Ltkg9rcWU6 H/T @Libranalysis @ChristiaanBeek @John_Fokker @FilippoSitzia
#malware #cybersecurity

[Raj Samani @Raj_Samani]

Activity associated with #log4j remains particularly prevalent - we see indicators across 72 countries and multiple sectors. more details here: https://t.co/3S7zMyPeHN #malware #cybersecurity #infosec H/T @Jeffrey_Sman @Glacius_ @_Fritto_ @tim_hux
@John_Fokker @JCMarques15

[Raj Samani @Raj_Samani]

We are hiring! Our SE team have a number of roles across multiple regions. For more information and the opportunity to work with @arnlopez please visit: https://t.co/x9klT6lfos @McAfee_Business #infosec #infosecjobs

[The Record From Recorded Future News @TheRecord_Media]

A North Korean cyber-espionage group breached one of the most popular North Korean-themed news sites on the internet in order to carry out a watering hole attack and infect some of the site’s visitors with malware https://t.co/dKT9E05d3X

[Christiaan Beek @ChristiaanBeek]

REvil #ransomware Linux variant spotted, encrypts *nux systems and ESXi. We created a demo: https://t.co/OtU0GBE3WL hash: ea1872b2835128e3cb49a0bc27e4727ca33c4e6eba1e80422db19b505f965bc4 H/T @Glacius_ @McAfee_Labs #DFIR

[BleepingComputer @BleepinComputer]

New stealthy Linux malware used to backdoor systems for years - @serghei
https://t.co/SgUigNTT6I

[Threatpost @threatpost]

Gamer alert! @nvidia bugs allow privilege-escalation attacks, arbitrary code execution, denial of service (DoS) and information disclosure-- YIKES https://t.co/0CyUjcKBPG #patchoftheday #CyberSecurity

[Raj Samani @Raj_Samani]

Prevalence for the China Chopper web shells reveals recent activity targeting nine countries, including US, UK, France, Canada. Details and updated IoCs here: https://t.co/3S7zMyPeHN #cybersecurity #infosec #malware