Lukáš Zobal

Senior Cybersecurity Researcher @AvastThreatLabs – Threat Intelligence, Honeypots, Deception, Password Cracking.

[Tesla Europe, Middle East & Africa @teslaeurope]

An update on FSD Supervised in Europe

FSD is currently approved in five EU countries (NL, DK, BE, EE, LT), used by >70k customers for over 1 million km per day, and is 4.1x less likely to get into a crash compared to manual driving, measured across 100 million km on public EU roads.

Leading up to a potential EU-wide approval vote for FSD Supervised on October 6th, 2026, we have decided to open-source one of the key pieces of evidence used to support the Netherlands approval.

As a reminder, we adjusted the FSD design to be compliant with existing regulation (UN-R-171 DCAS) but requested an exemption for certain behaviors via the EU Article 39 procedure. The following dashboard is evidence of safety for those exemptions.

This exact dashboard was shared with all EU Member States in April 2026, shortly after RDW’s approval, and all data presented is from before that date.

https://t.co/hh2dAKi8oP

European countries recorded 19,400 road deaths in 2025. That's around 53 deaths/day, with the vast majority of these crashes attributed to human error. These deaths are largely preventable with technology we have today.

FSD Supervised is already saving lives where it’s approved – yet in much of Europe, that safety benefit remains locked behind bureaucracy.

[Gen Threat Labs @GenThreatLabs]

When was the last time you got rickrolled? 🪩🕺

We were starting to think malware authors had lost all sense of humor, but then we found this sample that runs whatever PowerShell command a Spotify playlist is named.

And that playlist turns out to have rather refined taste, containing a single track: Never Gonna Give You Up by Rick Astley.

Rename the playlist, and you have just pushed a new command to every infected machine.

IoCs:
open.spotify[.]com/playlist/2dvn7V4XCeuTLtxfxk2Z10
open.spotify[.]com/playlist/77UhzsiaoltLTvTgnY5jHI

a7df9a9665a96ca5814b40e4c6aac121d8822fd702d80b597b567b274ac943fd
8cfaa9120e316c59e4d6fa3093c7fe19e231b0ff1d39baa3993742627e26e105
22c9422358273b2c9ce7c6641f925e34ba1197efa7363ce8fc1553e105746df3
55565dd4f8070624f2a18e9ddd1ca6a04f46b587a6e0c9e804f60603c0258f82
4b4ae799a07bd7bc4b9bbce47fe30055f2257e05043e9c7a8be0d556ef55d718

[Alex @alexpilar]

Dnes byl @Trezor tým v čele s @matej_zak úžasný. Už dlouho jsem nebyl tak pyšnej na to, co dokáže český engineering 💪🇨🇿

Model Safe 7 je nový standard:
• první open-source a auditovatelný Secure Element na světě - český chip Tropic01 od @tropicsquare
• Bluetooth konektivita s E2E šifrováním
• quantum-ready bezpečnost
#MadeInCzechia

[Jakub Kroustek @JakubKroustek]

Glad to share our team at @GenThreatLabs took down #FunkSec - the first known AI-built ransomware. We found a crypto flaw, worked with law enforcement, and built a free decryptor. It’s now also on @EC3Europol’s NoMoreRansom 🔓 #DontPayUp
🔗 Read more in: https://t.co/0JfBPzvUhO

[Gen @GenDigitalInc]

FunkSec is the first known ransomware built using generative AI.

Our researchers identified a cryptographic flaw, worked with law enforcement and developed a free public decryptor. Victims can now recover their files — no ransom required.

Learn more:🔗https://t.co/PBJGqPLljw

[Petr Pavel @prezidentpavel]

Jakou hodnotu by měly volby konané v zemi, která se už 3 roky brání agresi sousední jaderné velmoci? Jak zorganizovat volby s pětinou území obsazenou okupačními vojsky a pod každodenním ostřelováním celé země? Nazvat prezidenta takové země diktátorem vyžaduje velkou dávku cynismu.

[Lukáš Zobal @LukasZobal]

@Patreon @PatreonSupport Bonus: If you visit https://t.co/6kGnYYBcSx and enter your email address to see what's up, the website looks like the crypto airdrop homepage because you have just one subscription, so you want to deliver all the juicy new stuff, right?

[Lukáš Zobal @LukasZobal]

@Patreon @PatreonSupport You have to stop sending emails to unverified addresses. For the last 2 days, my mailbox has been full of crypto scams - from you.

[Lukáš Zobal @LukasZobal]

@Patreon @PatreonSupport How it works:
1. Scammer registers an account on my email.
2. Scammer subscribes with the account to their campaign.
3. They send scam updates directly to my email inbox from the Patreon domain.

Who cares if the email address has not been verified, right?

[Gen Threat Labs @GenThreatLabs]

In cooperation with @TalosSecurity and Dutch @Politie 🇳🇱, Avast is releasing an updated version of the Avast #Babuk #ransomware decryption tool, capable of restoring files encrypted by the #Babuk variant called #Tortilla. Details on https://t.co/GVbxiKeuHI.

[Gen Threat Labs @GenThreatLabs]

Feb 2022: #Conti #ransomware data was leaked, we created a decryptor in hope for some keys to be released. To no avail.

Mar 2023: #MeowCorp (a Conti 2.0 clone) keys were published, we released a Conti decryptor, and hope for more keys to come. #DontPayUp

https://t.co/taWAlomTNV

[Jon Uleis @MovingToTheSun]

My new favorite thing - Bing's new ChatGPT bot argues with a user, gaslights them about the current year being 2022, says their phone might have a virus, and says "You have not been a good user"

Why? Because the person asked where Avatar 2 is showing nearby

[Gen Threat Labs @GenThreatLabs]

We are currently seeing a massive campaign spreading the information-stealing malware #Raccoon Stealer.
Since Feb 9, we've protected more than 270K unique users, preventing Raccoon to be downloaded onto their computers.
The most impacted countries are IT, ID, PH and IN.

[Gen Threat Labs @GenThreatLabs]

We’ve wrapped up 2022 in the Avast Q4/2022 Threat Report. On #AvastDecoded, we’ll fill you in on zero-day attacks discovered in the wild, new #malware spreading techniques, another #decrypted #ransomware, shifts in the threat landscape, and much more. https://t.co/LNOeWp8A9o

[Defense of Ukraine @DefenceU]

Every athlete of the russian Olympic team is an individual promoter of these:

[Gen Threat Labs @GenThreatLabs]

Avast releases decryption tool for the #BianLian #ransomware! Find the tool and instructions on how to use it on #AvastDecoded: https://t.co/A16DLkVPws #DontPayUp

[Gen Threat Labs @GenThreatLabs]

Several waves of #MagniBer #ransomware attacks have hit FR 🇫🇷, IT 🇮🇹 and DE 🇩🇪 in the past hours with roughly 20K protected users. The attackers used #malvertising, leading to downloading a ZIP file with a fake MSI installer that appears to be an important security update.

[The Shadowserver Foundation @Shadowserver]

We are thrilled to announce the official launch of our new Shadowserver Alliance enabling us to sustain & scale up delivery of no cost cybersecurity & threat intelligence services to Internet defenders & LE worldwide! Join here: https://t.co/3kG6E7DU70

https://t.co/kVCD0qWpz6

[Gen Threat Labs @GenThreatLabs]

📣 Let's start a new era of #YARA debugging together! Introducing YARI, an interactive debugger and a new addition to our #opensource family https://t.co/45aJR2XkCJ. Learn more in the blog post by @KastakMatej: https://t.co/6sHFUhO3ux

[The Shadowserver Foundation @Shadowserver]

It’s here! Our new Dashboard lets you explore some of our Internet-scale data sets: scanning for exposed services, large honeypot sensor networks for detecting attacks, botnet sinkholing & more. A special thank you to UK FCDO @LondonCyber for funding!

https://t.co/BA1c0UkJ13