somedieyoungZZ

butterfly effect

[somedieyoungZZ @IdaNotPro]

🚨 New Blog: *Kimsuky: A Gift That Keeps on Giving* 🎁

Explore Kimsuky APT's multi-stage infection chain using LNK files, VBS scripts, and C2 communication. See how this DPRK threat actor evolves.

🔗 https://t.co/RshpYDK1RR

#Kimsuky #APT #Malware #DPRK

[MAS @massgravel]

There's a lot of misinformation and panic going around about the Windows GDID (Global Device ID), let's talk about what it actually is. 🧵

[CloudSEK @cloudsek]

New supply chain threat uncovered
CloudSEK TRIAD found an npm campaign using crypto-javascri, a typosquatted package impersonating crypto-js.
It steals npm/GitHub credentials, hijacks maintainer accounts, and uses Tor-based C2 to stay harder to disrupt.

https://t.co/akr2RpJeDg

[MSec Operations @MSecOps]

Our first Blog post is live, Introduction to RustPack 🔥

https://t.co/dKLnq6xodx

More to follow in the future for sure!

[somedieyoungZZ @IdaNotPro]

@WeirdQuadratic 🐐

[somedieyoungZZ @IdaNotPro]

🚨 New Research Alert: Inside the RedSun Windows 0day

A closer look at why this vulnerability exists and how Defender’s own logic enables the system compromise.

Read more:
https://t.co/3P4XWbGueJ

h/t @WeirdQuadratic 🐐
#Windows #RedSun #0Day

[somedieyoungZZ @IdaNotPro]

🚨 New Research Alert: Inside the RedSun Windows 0day

A closer look at why this vulnerability exists and how Defender’s own logic enables the system compromise.

Read more:
https://t.co/3P4XWbGueJ

h/t @WeirdQuadratic 🐐
#Windows #RedSun #0Day

[neptune @n3ptune_cpu]

Here's the exploit in action, using the RedSun PoC

(note this is demostrated in virtual machines and this is purely for educational purposes, please don't repilcate the exploit on any systems you are not permited to do so)

[CloudSEK @cloudsek]

CloudSEK Triad has published a detailed investigation into the RAMP cybercrime forum, covering its operations and working from 2021 through its seizure by the FBI in January 2026.

Read the full report: https://t.co/8SXZDf4K8n

[J. A. Guerrero-Saade @juanandres_gs]

Sergey Mineev was the greatest APT hunter of all time. He sought no glory, he just loved the hunt. And his discoveries repeatedly redefined our collective knowledge of global cyberespionage.

[somedieyoungZZ @IdaNotPro]

@oct0xor @Skvern0 RIP

[Ben @polygonben]

🚨Recent MuddyWater APT campaign, linked to Iranian intelligence, exposed by Ctrl-Alt-Intel 😬

- 10+ CVEs used
- Custom-developed C2s
- EtherHiding malware
- Sensitive data stolen

https://t.co/T7ppLU9M8C

Super fun collab-ing with @ice_wzl_cyber to get this published 🔥

[somedieyoungZZ @IdaNotPro]

@cyberwar_15

[Seongsu Park @unpacker]

Excited to share my latest research on APT37 (aka ScarCruft) and their evolving campaign targeting so-called "isolated" networks through a carefully orchestrated multi-stage infection chain.

Key findings:
▶️Ruby-based loader: APT37 is deploying full Ruby runtimes with trojanized script to blend execution within legitimate environments.
▶️USB dead-drop technique: A refined removable media workflow bridges air-gapped segments, leveraging hidden directories to stage tasking and exfiltrate data.
▶️Cloud C2 evolution: The group has expanded its cloud abuse playbook, incorporating Zoho WorkDrive as an operational command-and-control channel.

In this research, I detail the full intrusion lifecycle from the initial LNK lure to the deployment of the surveillance backdoors with technical breakdowns.

Blog: https://t.co/usDMqBmQRn

[NetAskari @NetAskari]

Chinese SEO's are apparently also scared of "Silver Fox", which is supposed to be a Chinese APT: 防止银狐等病毒群发诈骗领导和同事 ( "Prevent silver fox and other viruses from sending out mass fraud to defraud leaders and colleagues" ).

[CIA @CIA]

挺身而出的原因：为拯救未来

https://t.co/mhQbzet5X2

[somedieyoungZZ @IdaNotPro]

@goldenjackel12 @PrakkiSathwik @500mk500 @ElementalX2 @smica83 @polygonben 8a7fd76f466762490154f25a067a2eec08e41346074181548fcc43ebac269fc4
One more Protokol_KUAP_121_3.1_0915-2026.pdf.lnk

[Sh4dowExe @Sh4dow3x3]

⚠️⚠️RAMP FORUM SEIZED !!!⚠️⚠️

[Abdulkadir | Cybersecurity @cyber_razz]

A cybersecurity beginner trying to choose a career path