IstroSec

European #Cybersecurity Company.
#ThreatIntelligence. Incident Response. Cyber Advisory.

[IstroSec @istrosec]

#ransomware can be one infected USB drive away. If you got hit, fill in our #incident reporting form: https://t.co/0BMRddZEfa
Ransomware #incidentresponse data sheet: https://t.co/OmL0s9ema6
[email protected]
#digitalforensics #cybersecurity #csirt #istrosec #istrocsirt

[IstroSec @istrosec]

We've been taking a look at the CVE-2022-27254 exploitation with the use of @flipper_net.
This vulnerability affects several Honda vehicles, due to the use of fixed codes in the remote keyless entry system. #flipperzero #carhacking #cybersec #hondacivic
https://t.co/Sxg1eKjGNp

[IstroSec @istrosec]

Shout out to @ayyappan162010 for his working implementation of CVE-2022-27254, we've made mockup video (https://t.co/atk8tVPu4u) showcasing the exploit.

[IstroSec @istrosec]

Our colleagues Henrich Slezak and Milan Kyselica will be speaking at TF-CSIRT Meeting & FIRST Regional Symposium. Register here:
https://t.co/Q2595K0vSj
#csirt #cert #fuzzing #windowsmediafoundation #cybersecurity #istrosec

[IstroSec @istrosec]

Iranian state-sponsored group #APT35 uses #log4shell #exploit to deploy #CharmPower backdoor.

https://t.co/XCaZYK3GYp

#backdoor #cybersecurity #technology #informationtechnology #log4j #istrosec

[IstroSec @istrosec]

After #Log4J vulnerabilities, here comes the first critical #remotecodeexecution vuln, this time in H2 Database Console. Many similarities with #log4shell.

#cybersecurity #rce #JNDI #database #technology #istrosec

https://t.co/ujZOVzwUe6

[IstroSec @istrosec]

Škodlivý malvér s názvom #blister je #loader, ktorý na zariadení inštaluje #cobaltstrike a #BitRAT. Vďaka použitiu valídnych certifikátov na podpisovanie kódu sa vyhýba detekcii.
#istrosec #malware #cybersecurity #incidentresponse #dfir

https://t.co/KE47b1Bpb9

[IstroSec @istrosec]

By combining CVE-2021-42278 and CVE-2021-42287 #privilegeescalation to domain administrator is possible. #Patch now and assess possible #compromise=> https://t.co/ExT48m0xzs

#activedirectory #cybersecurity #istrosec #vulnerability

https://t.co/oZkkLuHflb

[IstroSec @istrosec]

#Conti #ransomware gang weaponized #Log4j vulnerabilities. To deploy ransomware, it leverages #emotet, #cobaltstrike, #kerberoasting and #bruteforce attacks.

#istrosec #cybersecurity #informationtechnology #trickbot

https://t.co/EmW6eqQ1Jg

[IstroSec @istrosec]

Remote access trojan používa #registry v operačných systémoch #Windows a uniká tak detekčným mechanizmom vačšiny bezpečnostných nástrojov.

#securitytools #RAT #remoteaccesstrojan #darkwatchmen #malware #cybersecurity #istrosec
https://t.co/mrOyuA4eeY

[IstroSec @istrosec]

If you patched #RCE vulnerability in #log4j by deploying v2.15, we have some bad news for you. It is being actively exploited to carry out #DDoS attacks. If possible, update to 2.16.0.

#cybersecurity #vulnerability #apache #istrosec #log4j2

https://t.co/KzKcoqf4cy

[IstroSec @istrosec]

Lukáš Hlavička, Milan Kyselica a Henrich Slezák zo spoločnosti IstroSec diskutujú na tému #Log4Shell #exploit, jeho dopadoch a opatreniach pre zmiernenie rizika exploitácie.
#istrosec #log4shell #log4j2 #log4jrce #cybersecurity #apache
https://t.co/5YrA3clTLz

[IstroSec @istrosec]

Cybercriminals are actively exploiting #log4j exploit #Log4Shell to target Windows machines with novel #Khonsari #Ransomware.
If you need help with ransomware #preparedness or #incidentresponse, contact us! More info on https://t.co/NggZkQQm7X
https://t.co/zJw0tWg7bZ
#istrosec

[IstroSec @istrosec]

You should update to #log4j 2.15.0 asap. If you can not, you will need to change the configuration files, or isolate the system. Configurations together with IOCs are in our blog => https://t.co/Oz3HgtJSpn

#java #log4shell #rce #CVE202144228 #cybersecurity #vulnerability

[IstroSec @istrosec]

@ladislav_b was rocking it at #CyberCrimeCon21! Thank you very much @GroupIB_GIB for having us!
#istrosec #cobaltstrike #APT #malwareanalysis

[IstroSec @istrosec]

Wherever we go, we establish a #CSIRT team there. Cooperation and info sharing is of utmost importance to us. Thank you @tfcsirt for listing our team in #trustedintroducer.
More info on IstroCSIRT: https://t.co/KY2K9eTAzh
#incidentresponse #digitalforensics

[IstroSec @istrosec]

The #windows10 Timeline is an artifact with information about #useractivity: opening a file, visiting a website, etc. In #digitalforensics analysis, we have repeatedly been convinced of the usefulness of this lesser-known feature.
#blog
https://t.co/ObPIZ1SoEw

[Group-IB Global @GroupIB]

Meet Group-IB #CyberCrimeCon21 speakers!

Ladislav Bačo @ladislav_b, head of research @istrosec will share his findings about #APT campaign targeting European, governments, diplomats, individuals, and think-tanks.

Register here -> https://t.co/m7h9UFGHGl

[IstroSec @istrosec]

Here is the promised podcast featuring our expert #penetrationtester @milan_kyselica as a guest in @radiofm morning show.

#ranonaefemku #efemko #penetrationtesting #ethicalhacking #istrosec #podcast

https://t.co/TH6bIB6HjH

[IstroSec @istrosec]

Our colleague and #penetrationtester @milan_kyselica was a guest on today's Morning with @radiofm (Ráno na Efemku) with Dominika and Martin. If you missed it, we will share a link to a recording tomorrow.
#offensivesecurity #cybersecurity #ranonaefemku #pocuvajcochces #efemko