Gokumonji

A simple DFIR/CTI guy growing up :-} | CERT Analyst

[Chad Tilbury @chadtilbury]

Targeted Attacks being carried out via DLL SideLoading in Microsoft Teams and OneDrive https://t.co/pyW3349dyf >> Both applications make great targets for hijacks as they already have persistence.

[Hido Cohen @0xhido]

New blog post! This time @osipov_ar and I share some details about the #Donot #APT.

After understanding their communication protocol we were able to collect & analyze the latest updates introduced to the YTY framework.

Check it out on: https://t.co/SohKKrSQCo

[ThreatRecon @nshcthreatrecon]

North Korea government sponsored hacking group SectorA05 targeted Spear Phishing attack against NGO activists for assisted North Korean defectors, they also disguise as NGO activists for attack #APT #Phishing #threatintel #threathunting #threatintelligence

[Jakub Kroustek @JakubKroustek]

A few hours ago, we blocked a #ransomware sample in-the-wild that looks like a new #Sodinokibi / #REvil variant. Timestamp 2022-04-27, new config, new mutex, campaign ID, etc. Funny thing... it does not encrypt files; only adds a random extension 🤔 42 BTC https://t.co/UL1ECGLpmg

[Cluster25 @cluster25_io]

⚠️New blog post: The Lotus Panda is awake, again. Analysis of its last strike. #APT #malware #cybersecurity
https://t.co/kjiQw0u81N

[Intel 471 @Intel471Inc]

A report from @Intel471Inc noted that #Emotet has been leveraged by #Conti to determine future targets. https://t.co/zkUG6zUE3u by @scmagazine

[Intel 471 @Intel471Inc]

Conti ransomware activity has surged in the past weeks despite the recent exposure of the group’s operations - @Intel471Inc @SecurityWeek https://t.co/JHIsLk1TE1

[Melvin langvik @Flangvik]

Group3r (@mikeloss ), SharpSCCM (@_Mayyhem), KrbRelayUp (@dec0ne ) and KrbRelay (@cube0x0 ) added to SharpCollection. https://t.co/2l3oQhZLpk

[Gokumonji @Hacknologia]

Big thanks to the organizers of the @Botconf for this 2022 edition and a special thanks to the speakers and their incredible presentations, don't change anything ! You do such an great job! #Botconf2022

[Jason Fossen @JasonFossen]

CISA updates Conti ransomware alert with nearly 100 domain names to sinkhole:

https://t.co/ThFJ8YaL4u

Here are my SEC505 PowerShell scripts to sinkhole DNS domains:

https://t.co/Cy8ijDB9W8

#SEC505 #PowerShell #InfoSec #Ransomware #BlueTeam #CyberSecurity #Conti #CISA #SANS

[ET Labs @ET_Labs]

8 new OPEN, 16 new PRO (8 + 8). MSIL/BlackGuard Stealer, SystemBC, Various CVE and Win32/LokiBot.

Thanks @0xrb, @ViriBack, @3xp0rtblog and @felixaime

https://t.co/Ix1RxVwhyL

[CIRCL - @[email protected] @circl_lu]

Pandora is an analysis framework to discover if a file (mainly office files) is suspicious and conveniently show the results. You can also run your own service.

https://t.co/7akr5wFHwg
Online service: https://t.co/EJvqgfWh24
Open source repository: https://t.co/Xks9mFoURB

[CSIRT-MU @csirtmu]

👉@csirtmu participated in the 2022 TF-CSIRT Meeting & FIRST Regional Symposium Europe, presenting the #Malware Analysis Automation Platform platform developed in the @SAPPAN_H2020 project. The platform will be released as open-source in April. Stay tuned! #CyberSecurity

[vx-underground @vxunderground]

Due to sanctions placed on Russia, internet backbone provider @CogentCo, responsible for approx. 25% of all internet traffic, has ceased operations in Russia.

Cogent was the provider for Rostelecom an ISP handling more than 6,000 IPv4 address blocks.

tl;dr see image below

[Unit 42 @Unit42_Intel]

2022-03-03 (Thursday) - Still seeing #CobaltStrike from #Emotet infections - IOCs from our latest example available at: https://t.co/IMYumNjLHv

[NCSC UK @NCSC]

Today, the NCSC and our Five Eyes partners have issued a joint advisory about mitigating Log4Shell and other Log4j-related vulnerabilities.

You can read it here: https://t.co/bTP1IrPPlx

@CISAgov

[Gokumonji @Hacknologia]

@kryll_io @PaffCrypto @gate_io @PaffCrypto

[Kryll @kryll_io]

🗳 $KRL Listing Vote on @Gate_io is now open !

Vote is open until Dec, 16th 02:00 UTC

➡️ https://t.co/7JRQVxD1CC

🎁 To celebrate the vote we are giving away 500 $USDT to 1 lucky winner

📍Rules

- RT this tweet
- Tag a friend
- Follow @kryll_io

[Chris @ChrisSmiiic]

🎅 Calendrier de l’avent J-10🎅
Le metaverse trend, offrons du metacoin

A gagner : 300 d’$ENJ
Condition 🎄 :
- Follow @LordMarkets & @BybitFr
- RT

TAS : 15/12 16h 🕛

[France Cryptos 🔗 @FranceCryptos]

#CRYPTOCALENDRIER 🎄 16/25

Aujourd'hui gagnez 400€ de Lending Ethereum grâce @JustMiningFr ⚡️ ( 2 x 200€ )

Pour participer :

👉 Follow @FranceCryptos & @JustMiningFr
👉 Likez & Retweetez
👉 @ un ami !

⏳ TAS le 26/12 !

Bonne chance à tous ! 🍀 #Concours 🎁 #Noël