Is Manjarrez

🌺💻🥁🖤🔮

[Kaspersky @kaspersky]

Our researcher @IsMR0a from GReAT, has been testing public Wi-Fi in the field.
Open network, no encryption. What you send, others can see.
Her rule: no banking or logins on public Wi-Fi. Use a VPN.
Full research: https://t.co/vYdB4kJnoe

#CyberSecurity

[Is Manjarrez @IsMR0a]

If you’re traveling to see the matches, avoid logging into banking or sensitive accounts over public Wi-Fi, use a trusted VPN, and consider installing an eSIM before your trip. (5/5)

[Is Manjarrez @IsMR0a]

We analyzed 84,588 signal records from public Wi-Fi hotspots in Mexico City, Guadalajara, and Monterrey, the three host cities of the upcoming football tournament, and found that 17% of networks might be unsafe. (1/5)

https://t.co/RbEcCE1ESO

[Is Manjarrez @IsMR0a]

Across all three cities, however, 45% of “secure” networks still expose WPS, an outdated and easily compromised protocol that can leave devices vulnerable to unauthorized access and WPS-based attacks. (4/5)

[Kaspersky @kaspersky]

“Seeing is no longer believing.”

Advances in AI are enabling the creation of highly convincing synthetic identities — combining real and fabricated data to bypass verification systems and scale fraud operations.

Follow the conversation.

#KHORIZONS

[Is Manjarrez @IsMR0a]

JanelaRAT: una amenaza financiera para usuarios de América Latina
🪟🐀
https://t.co/9oyQChYOpI

[Georgy Kucherin @kucher1n]

The CPU-Z and HWMonitor incident is the sloppiest supply chain attack I've EVER seen. The payloads have been copy-pasted from a previous attack, with C2 server reuse. The final implant, STX RAT, wasn't even cleaned from detections with PUBLICLY available Yara rules!🤦[1/4]

[Kaspersky @kaspersky]

You solve a CAPTCHA. Attackers solve the rest. New Horabot campaign uses fake verification pages + multi-stage loaders to deploy a banking Trojan and spread via email.

All from one pasted command. Full breakdown 👇
https://t.co/liZQkhO4Bd

#cybersecurity #malware #threatintel

[Kaspersky @kaspersky]

Kaspersky GReAT has discovered that a fake Starlink Android app is being used to distribute BeatBanker, a multi-purpose mobile threat.

An earlier version of BeatBanker combined a miner and banker. Newer ones pair a miner with a RAT.

One unusual trick: it loops a nearly inaudible audio file to help stay active on the device.

Full analysis: https://t.co/aJcWAqYVZE

#AndroidMalware #ThreatIntel #Cybersecurity

[Georgy Kucherin @kucher1n]

It turned out there are many more payloads used in the Notepad++ attack! To stay undetected, its masterminds were COMPLETELY changing execution chains about every month.

Here are more IPs used in the attack:
45.76.155[.]202
45.32.144[.]255

Read below for many other IoCs! [1/8]

[Kaspersky Latinoamérica @KasperskyLatino]

El nivel de amenaza IoT en Latinoamérica es mayor que en otras regiones del mundo.👩‍💻 Según Isabel Manjarrez, Investigadora de Seguridad en el GReAT de Kaspersky, este incremento nos impulsa a reforzar la seguridad de forma constante y planificada para hacer frente a los ataques dirigidos a dispositivos conectados. Aquí los detalles: https://t.co/ablANtV6lD

[Ekoparty | Hacking everything @ekoparty]

¡Gracias @kaspersky por acompañarnos a la #EKO2025 como Platinum Sponsor! 💎

🚀 Kaspersky es una empresa global de ciberseguridad y privacidad digital fundada en 1997. Su profunda experiencia en inteligencia de amenazas y seguridad se transforma constantemente en soluciones y servicios de seguridad innovadores para proteger a empresas, infraestructuras críticas, gobiernos y consumidores en todo el mundo.
El amplio portafolio de seguridad de la compañía incluye una protección de endpoints líder y una serie de soluciones y servicios de seguridad especializados, así como soluciones de ciber inmunidad para combatir las amenazas digitales más avanzadas y en evolución.

✅ Más de 400 millones de usuarios están protegidos por las tecnologías de Kaspersky, y ayuda a 220,000 clientes corporativos a proteger lo que más valoran.

📌 ¡Conocé más! >> https://t.co/CiHTYT0d0z

Te esperamos el 22, 23 y 24 de octubre en el CEC - Buenos Aires. ¡Comprá tu entrada ahora! 🎟️ >> https://t.co/TUxtZxL0du

[Red Team Space @redteamspace]

Ya estamos a muy pocos días de la @ekoparty les vamos spoileando algunas de las actividades que tendremos en el @redteamspace este año.

[Kaspersky @kaspersky]

🚨 #RevengeHotels (aka TA558) has been targeting travelers since 2015, stealing credit card data through phishing campaigns that look like ordinary document-sharing requests.

This summer, our experts uncovered something new: the group is now deploying #VenomRAT, a highly sophisticated tool designed to maximize damage. Even more alarming, evidence suggests parts of their malicious code may be AI-generated.

💡Read the detailed analysis: https://t.co/ZiWMbcJJ5P

#CyberSecurity #ThreatIntelligence #AI #Kaspersky

[Is Manjarrez @IsMR0a]

RevengeHotels: a new wave of attacks leveraging LLMs and VenomRAT
🏨🛎���👾

https://t.co/8Ep40QhyzG

[InfoSecMap @InfoSecMap]

@lavillahacker @nicowaisman @MarcoFigueroa @FedeQuark @act1vand0 @defcon Other speakers at @LaVillaHacker during #DEFCON33 included @controlpaths, @Alevsk, @CharmingMichi, @Asher_Davila, @r0r0x1, @M41w4r31, @IsMR0a, @fixxx3r, and @NikoBehar. 🌎 🚀

Explore all @DEFCON villages 👇🏽
https://t.co/Tv1z7VtBsb

#LaVillaHacker #InfoSec #LATAM #CyberSecurity

[Kaspersky @kaspersky]

Spotlight on our colleague @IsMR0a, Security Researcher at Kaspersky GReAT LatAm, who took the stage at #DEFCON to unpack:
💥 Why LATAM is a hotspot for ransomware
🔎 Top families: RansomHub, LockBit, Akira, Arcus Media, Funksec
��� Key TTPs behind successful attacks

#Kaspersky #CyberSecurity

[lavillahacker @lavillahacker]

🎤 ¡Lxs speakers de #LaVilla en #DEFCON 33 ya están aquí!
Prepárate para charlas, talleres y mucha comunidad 💜
🔗 Conócelos y revisa el schedule completo en nuestro sitio web y en Hacker Tracker.

https://t.co/mI9cZKgVos

#defcon33