LAB52

(Cyber) Intelligence @ S2 Grupo #intelligence #cybint @s2grupo @securityartwork

[LAB52 @LAB52io]

Check out our new book, now available: Cyber GRU. Russian military intelligence in cyberspace https://t.co/yUYraMbgjL #Russia #GRU

[LAB52 @LAB52io]

👇👇👇&& 🍿🍿🍿

[Michael Weiss @michaeldweiss]

The GRU hacked into Jared Kushner's iPhone. Dutch military intelligence (MIVD) then recruited a GRU spy who gave them access to the hacked phone. What MIVD discovered was that Kushner had access to two bank accounts --one Azerbaijani, the other Israeli --where Saudi Crown Prince Mohammed bin Salman and Emirati ruler Mohammed bin Zayed deposited money. It sounds like a slightly far-fetched episode of "Slow Horses," but it's real. And it proves just how eye-poppingly corrupt this administration was and continues to be as its "special envoy" decides the fate of tens of millions in Europe in the Middle East. Simply incredible reporting by Matthew Cole, drawn from his new book on Kushner. https://t.co/8AyV60gg1X

[LAB52 @LAB52io]

An interesting paper about #Russian low-level ("disposable") agents in recent years:
Russia’s low-level agents: characteristics, roles and organisational structure of covert operatives in Europe, 2022–2025
https://t.co/nKCAUd5swK

[LAB52 @LAB52io]

INC and The Gentlemen Ransomware: Exposed AI Infrastructure
https://t.co/cdYsEmjMkT

[LAB52 @LAB52io]

IN LOGS WE TRUST!!

[Security Art Work @Securityartwork]

Acaban de llegar ;)

[LAB52 @LAB52io]

Happy National Day of Spain! 🇪🇸

[Michael Weiss @michaeldweiss]

Leipzig drone attack traced to the Special Tasks Department of the GRU.

[LAB52 @LAB52io]

Margaret Hamilton, computing pioneer who led software development for the Apollo program, dies at 90 https://t.co/TjUFY51NRu 😢😢😢

[SwitHak (👁) @SwitHak]

Earth Sirrush (AKA UAC-0099, SHADOW-EARTH-065) : A Russia🇷🇺-Aligned Intrusion Set With 4 Years of Evolving Espionage Tooling
(Target Ukrainian🇺🇦 government, defense, border guard, and logistics since at least 2022)
↘️
https://t.co/hpRt7ECxJf | By @trendai_RSRCH

[LAB52 @LAB52io]

Check out our new post!! Cyber Morocco: a quick and dirty experiment about artificial intelligence for cyber intelligence https://t.co/pZn8deCwJU #Morocco

[LAB52 @LAB52io]

@VessOnSecurity @ThaiCERT Great work, thanks!

[LAB52 @LAB52io]

I asked Claude to summarize the names of APT28 identfied in the Threat Group Cards by @ThaiCERT. I chose #APT28 because it is the group with more names, as stated in https://t.co/Yclo3S8kMZ
The result is INSANE 😂😂😂

[LAB52 @LAB52io]

Check out our new post!! Backdoors in the Dungeon – TURN & MQTT Abused by DragonForce https://t.co/ki7JqSm9ws

[LAB52 @LAB52io]

@gor_zilla @VessOnSecurity @Tom_From_The_UK @ThaiCERT 😱😱😱

[LAB52 @LAB52io]

So true... 👇👇👇

[Security Art Work @Securityartwork]

Esto... que nuestro equipo de #DFIR nos quiere mandar un mensaje!!! /cc @s2grupo @LAB52io

[LAB52 @LAB52io]

@0x0v1 100% agree, particularly about the challenge. Perhaps MITRE, or similar, should be the reference here

[LAB52 @LAB52io]

@noktec @ThaiCERT my god! :)

[LAB52 @LAB52io]

@EndyPrincesse @ThaiCERT 😱😱😱😱😱

[LAB52 @LAB52io]

@0x0v1 I fully agree. Of course, it is difficult to fully identify a threat actor in a particular incident, particularly in early stages. However, when attribution is almost certainly clear, I think we all should point to a public reference mapping

[LAB52 @LAB52io]

@VessOnSecurity @ThaiCERT Yes, the article is old and the host is not updated. Thanks (btw, I'll keep an eye in your platform :)

[LAB52 @LAB52io]

@0xjet @ThaiCERT The mix of TA with particular operations, or even with tools, always surprised me :( It is the height of chaos!!

[LAB52 @LAB52io]

@VessOnSecurity @Tom_From_The_UK @ThaiCERT As stated, I confirm the source that Tom says... Yes, it is not very friendly for automatic processing, but as I said before, some years ago we turned the data into CSV or something like that to play with it