Luca Giuffrida

Junior Threat Intelligence Researcher interested in RE/Malware Analysis with focus on APT

[Luca Giuffrida @LucaGiuffrida4]

@Reptile9LoL I opened a ticket to riot, but they were unable to solve it. It seems that the introduction of Vanguard was a problem. I noticed that going on task manager and closing all Lenovo laptop process and windows store app is helping

[Luca Giuffrida @LucaGiuffrida4]

@Reptile9LoL Same to me. I had 200 fps cap that was never dropping before the introduction of the Arcane aram map. After that I constantly have fps drop when spells are launched going from 200 to 120. https://t.co/GlVhMg0rmu Reddit is full with threads about it

[Luca Giuffrida @LucaGiuffrida4]

@LeagueOfLegends Matchmaking improvements aka 4 diamond 3 vs 4 emerald 3.
Matchmaking: Improved 👍

[Luca Giuffrida @LucaGiuffrida4]

@fmc_nan Hi, not sure if it can be a decoy, but look at what's on the url path

[Luca Giuffrida @LucaGiuffrida4]

@asdasd13asbz It happens! 😉

[ESET Research @ESETresearch]

#BREAKING On January 25th #ESETResearch discovered a new cyberattack in 🇺🇦 Ukraine. Attackers deployed a new wiper we named #SwiftSlicer using Active Directory Group Policy. The #SwiftSlicer wiper is written in Go programing language. We attribute this attack to #Sandworm. 1/3

[Luca Giuffrida @LucaGiuffrida4]

My solution to the Challenge 1 of the #zero2automated course. Here we had to dive deep into the string decryption routine of a #Gozi/#ISFB sample.
https://t.co/L0D2Pj3H0i

[Luca Giuffrida @LucaGiuffrida4]

@HaoZhixiang @tekhackers @TheHackersNews @HackerHalted @AhnLab_SecuInfo @krNeoTra @kryptos_co @nao_sec It seems like an old hostname. Doc metadata tells that the last time it was modified was in june, probably the C2 is down atm

[Unit 42 @Unit42_Intel]

We cover recent activity of #TridentUrsa, aka #Gamaredon, known as one of the most pervasive, intrusive, continuously active and focused APTs targeting Ukraine. We cover shifts in the group's TTPs as their reach continues to expand. https://t.co/zYk9fv2iUn

[Luca Giuffrida @LucaGiuffrida4]

@m_r_tz Thanks a lot to you!

[Luca Giuffrida @LucaGiuffrida4]

First year attempting #flareon9. It was very fun and challenging, sadly I was not able to finish it stopping at challenge 8. However, I want to share my solutions of challs 3-7 https://t.co/BPOUU9Yri5
It is also my first blog post, dm for helpful tips would be appreciated 😀

[Luca Giuffrida @LucaGiuffrida4]

My analysis of the custom sample given by the authors of the #zero2auto #malwareanalysis course https://t.co/5w8wVvSKML

[Jono @katechondic]

Have spent a bit of time trying to make Ghidra more "user friendly" to people coming from other decompilers by altering the keybinds for WIndows users.

Any feedback is always welcome (well...some feedback is welcome, some of the time)

https://t.co/4qd8ddWgbj

[Luca Giuffrida @LucaGiuffrida4]

@Saszper Hi can i dm you for some hints, please?

[Luca Giuffrida @LucaGiuffrida4]

@c3rb3ru5d3d53c As far as I can read online it seems like an Anti-debug trick that makes DbgUiRemoteBreakIn point to the actual function but not so sure about it