Yennnnnn_

oooooooops

[Yennnnnn_ @GGGGh0st]

@liqingjia1989 牛逼

[gfw.report @gfw_report]

我们在中国防火长城（GFW）DNS审查系统中发现了名为Wallbleed的漏洞。该漏洞允许任何人从世界任意地点读取GFW的内存。自2021年10月起的两年中，我们逆向工程了其DNS注入逻辑、评估了信息泄露的影响，并追踪了审查者的修补过程。Wallbleed让审查设备成为隐私噩梦。论文中文版： https://t.co/Tn6eETQcuG

[Yennnnnn_ @GGGGh0st]

@Timele9527 😭

[Yennnnnn_ @GGGGh0st]

@malwrhunterteam bitter

[Yennnnnn_ @GGGGh0st]

@lizhihuan3 no,old sample but uploaded to VT recently

[Yennnnnn_ @GGGGh0st]

#apt #bitter
894c79fa0a5c7a37e6b3284665ef3177494683c3a22766995829f28e49217ccd
f54a7bbdf648ee049932a729558d632f010c2207dea1fa015d8373f81944937b
9f9eeb9971af7cac68e35b219228592531cad8ca721605b061ee98f34aa7f18d
neozelappconsole[.]com

[Yennnnnn_ @GGGGh0st]

62e42d3e778fd79b7989966b057c24c141531f871a7c73703b35858ab3d13f47
one more from bitter

[Yennnnnn_ @GGGGh0st]

#apt #patchwork
a142d188ce4e97911faa6f0a6f3962749fe9cb2043499a162fbd91b3d131a416
mfaturk[.com

[Yennnnnn_ @GGGGh0st]

@BaoshengbinCumt true

[Hirokr @hir0k1sawada]

国外赏金猎人手撕深信服下一代防火墙(感觉哥们多少有点生气🤯了，哈哈哈哈哈哈隔)https://t.co/dxZqPV2e4h

[Yennnnnn_ @GGGGh0st]

@liqingjia1989 old sample from year 2021

[Yennnnnn_ @GGGGh0st]

cool

[ジュリアン•グラン•ポアソン🔋🚗 @bfishadow]

Meanwhile in China...

[Georgy Kucherin @kucher1n]

Recently, I've been researching #OperationTriangulation, a very sophisticated campaign targeting iPhones of my colleagues. They have been infected (through zero-click exploits) with APT malware. Here are some results of our research: https://t.co/XLhpXUZt0E.
@bzvr_ @2igosha

[blackorbird @blackorbird]

The SideWinder group’s in early March 2023 identified Turkey as a new target.

https://t.co/CMOkRBDWBv

[Yennnnnn_ @GGGGh0st]

@500mk500 domain looks like sidewinder

[Yennnnnn_ @GGGGh0st]

@vinopaljiri thanks for sharing

[Yennnnnn_ @GGGGh0st]

比NSA牛逼😅

[Yong Xiong @yongxiong2008]

我们刚刚发表了关于拼多多利用安卓系统漏洞进行“提权攻��”获取用户信息的调查。我们邀请来自多国的技术专家检验了拼多多2月份发布的6.49版本的安装包，其中3家机构��细检验了拼多多的代码，他们在调查中发现，1/n w/@Nectar_Gan @julianaliu
https://t.co/YN4Tqo5cug

[Yennnnnn_ @GGGGh0st]

@lizhihuan3 i did't get it

[Yennnnnn_ @GGGGh0st]

#Donot #APT
553af150837d027b5beefea467460e2660f6204b49bb07a127c6fc0a0f7e59c8
winterhero[.]buzz
encrypt post data:Username-Machinename-ProcessorID|||Installed program|||version

[Yennnnnn_ @GGGGh0st]

@SethKingHi that's it