Gootloader

Security researcher dedicated to pissing off the Gootloader Threat Actor.

[Gootloader @Gootloader]

Guess who's back? 🎶
Gootloader's back. Again.

New evasion tricks. New persistence chain. Same legal-themed lures.
Big props to @RussianPanda9xx & @HuntressLabs for catching this one early.

Details: https://t.co/jLlG9WWSC7…

#gootloader #malware #JavaScript #powershell

[Gootloader @Gootloader]

Damn Cloudflare for blocking PHP2shell. Ruined my fun

[Gootloader @Gootloader]

@SwiftOnSecurity @grok what is this?

[Gootloader @Gootloader]

@vxdb I hate that it signs me out every 12 hours

[Gootloader @Gootloader]

@MsftSecIntel Apple has done something about Clickfix, why haven’t yall? Disable the run dialog box by default. If admins still want it, they can search on how to turn it back on.

I can’t believe yall sit back and just allow this to continue

Actually I can, as yall wont delist Bing results

[Gootloader @Gootloader]

@CISAgov Sports Illustrated?

[Gootloader @Gootloader]

@PandaRE__ @TENEXai Congrats

[Gootloader @Gootloader]

@PandaRE__ swap (Ctrl) and (⌘) on your Mac so that copy, paste, and other shortcuts work like Windows.
How to swap the keys
Open System Settings.
Select Keyboard.
Click Keyboard Shortcuts.
Select Modifier Keys.
Change these two settings:
Modifier Keys
Control (⌃) Key
Command (⌘) Key

[Gootloader @Gootloader]

@UK_Daniel_Card So…?

[Gootloader @Gootloader]

@MSNightmare2000 You should look at T anium, their client installers are on VirusTotal

[John Hammond @_JohnHammond]

✅ I acknowledge I have read and understood the information presented

https://t.co/XbzpDKRVh4

[Gootloader @Gootloader]

Anyone going to be in Vegas the next few days?

[Gootloader @Gootloader]

@vxdb DEFCON is canceled

[Gootloader @Gootloader]

@IntCyberDigest @mecchachameleon @Steam This map looks suspicious. Calling admin command prompts. Lots of files and URLs to go through https://t.co/BnBYsqhQ2n

[Gootloader @Gootloader]

@IntCyberDigest @mecchachameleon @Steam these maps are still up

[Gootloader @Gootloader]

@IntCyberDigest I’ve downloaded all 800+ maps and I think there are additional maps that need some analyzing

[Gootloader @Gootloader]

@Gulsher82522472 @0xsha @deFr0ggy @rez0__ Can it be tweaked for other themes?

[Gi7w0rm @Gi7w0rm]

New #OperationEndgame actions revealed.
This time targeting: #StealC

The blip video is hardcore.
1. #StealC Admin stole data from his affiliates/users
2. #StealC was so vulnerable, even Law Enforcement is laughing about them, directly mentioning the exploits being leveraged to steal their stuff.
3. Also a lot of affiliates seem to be named on the number plates of the vehicles, showing #OpEndgame knows exactly who they are up against.
4. Seems Law Enforcement themselves realized that they are only a "Bonus Stage" to ending an already completely broken product XD

I guess we can call this blip
#EndgameLevelTrolling ^^

More links on this in the first comment below.

[Gootloader @Gootloader]

@vxdb Is it next week?