Andrew Giancola

[Andrew Giancola @GPI_Giancola]

@yarden_shafir @vxunderground @crocodylii LMAO

[Andrew Giancola @GPI_Giancola]

Look at the Analysis of "YQrkeYMDPGEPpuJQD3KjnwxS.exe" with malicious activity. https://t.co/Nm9jC7bYJN #opendir #evasion #trojan #socelars #stealer #rat #redline #loader #sinkhole #gcleaner #vidar #amadey #glupteba #smoke #miner @anyrun_app

[Andrew Giancola @GPI_Giancola]

Look at the Analysis of "https://t.co/96kv0m2if5 https://t.co/qebO5LcBSr # @anyrun_app #Office365

[Andrew Giancola @GPI_Giancola]

#RackspaceOutage Get your playbook out, and inventory the email (looking for sensitive data, PII, and stored passwords in "notes") of the affected users so when you are contacted by the threat actor, you have a clear IDEA of what you are being asked to pay for.

[Andrew Giancola @GPI_Giancola]

Look at the Analysis of "https://t.co/7JeYr4Zoog" with malicious activity. https://t.co/W6Y8i7QNNq #phishing @anyrun_app

[Andrew Giancola @GPI_Giancola]

Look at the Analysis of "https://t.co/1E7sGI7aDy" with malicious activity. https://t.co/CsWhVC3qTD # @anyrun_app @Mailchimp

[Andrew Giancola @GPI_Giancola]

@corg_e How Validating! That's super awesome!

[Andrew Giancola @GPI_Giancola]

@GossiTheDog LMAO!!!!!! Down with ClownFlare!

[Andrew Giancola @GPI_Giancola]

@embee_research @_JohnHammond WOW, Big brain time!!!!

[Matthew @embee_research]

#Dumpulator script to extract decrypted strings from recent #Qakbot payloads.

This works by brute forcing index values to the Qakbot string decryption function.

Hoping to put out a detailed blog soon.
#RE #malware

[Andrew Giancola @GPI_Giancola]

Look at the Analysis of "https://t.co/P85NWw0KzX" with malicious activity. https://t.co/3VshWR9tlO # @anyrun_app #codingrooms

[Andrew Giancola @GPI_Giancola]

Look at the Analysis of "https://t.co/cey56sK1MN" with malicious activity. https://t.co/qTRXD243JN #square #phishing @anyrun_app

[Andrew Giancola @GPI_Giancola]

Look at the Analysis of "https://t.co/1hMhoeJ7Cs" with malicious activity. https://t.co/FURO1TSGhT # @anyrun_app #Phishing

[Andrew Giancola @GPI_Giancola]

@sherrod_im "FELL FROM A HORSE IN WAR" Really, it was a Pony at the fair, but the war on drugs _Was_ going strong, Do I qualify?

[Andrew Giancola @GPI_Giancola]

Look at the Analysis of "https://t.co/H0pUbmo1oN" with malicious activity. https://t.co/ZRmJSgJOAN #luminpdf #phishing @anyrun_app

[Andrew Giancola @GPI_Giancola]

Look at the Analysis of "https://t.co/fyotsTO6y2" with malicious activity. https://t.co/injokWM5Mh #phishing @anyrun_app

[Andrew Giancola @GPI_Giancola]

Look at the Analysis of "https://t.co/Ow0pwZ5ye1 https://t.co/j3Pl6wtil6 #phishing #googledrive @anyrun_app

[Andrew Giancola @GPI_Giancola]

Look at the Analysis of "https://t.co/IP2lVicjIK" with malicious activity. https://t.co/oyq27MBIo1 #backblaze #phishing #pcloud @anyrun_app

[Andrew Giancola @GPI_Giancola]

@Intuit Thank you, Monica! You're Awesome!!!!!

[Andrew Giancola @GPI_Giancola]

Look at the Analysis of "https://t.co/IpWhrKXNt4" with malicious activity. https://t.co/wHyZP2PsYx #norton #invoice #phishing @anyrun_app