PO3T

IT security analyst, malware enthusiast, poker player, gamer. ♠️♣️♥️♦️ All opinions expressed here are my own, not those of my employer.

[PO3T @PO3T1985]

Due to a family emergency I won't be able to attend tomorrows' #sziget #sziget2026 festival.

If someone's looking for some cheap 5-day VIP passes, you can get em here: https://t.co/OjogpNIQPm

Do me a favor: Have some fun for me.
Cheerio

[PO3T @PO3T1985]

@MartinGarrix @szigetofficial Thank you for the fantastic performance, regardless of power outage you did great. Really appreciated the show.

[PO3T @PO3T1985]

@CraigHRowland @SwiftOnSecurity I wouldn’t say EDR is the last line of defense, but certainly one. Regardless what triggers an alert (AV, EDR, ASR, IDS and so on) the root cause (attack vector) should be analyzed… also the alert dies not mean the attack is over, could be an indicator of ONGOING attack.

[PO3T @PO3T1985]

@troyhunt @UMNews 12 months of free identity monitoring? Ah gee thanks. Since you can‘t change your social security number, what about the remaining 50-80 years? 😂

Full disclosure: I‘m not US. Just thinking out loud about the cost of saving some bucks on measures they could‘ve taken prior…

[PO3T @PO3T1985]

@MathematicaKen Don't disable ALL ASR rules... just the one causing the shortcuts being deleted:
Block Win32 API calls from Office macros

[PO3T @PO3T1985]

@rowancrowe @troyhunt These scam mails been going around since 2019. Recently (since around 2 months) scammers started targeting website owners. An no, not targeted at any specific country… seen these a couple weeks back with some of my european customers.

[PO3T @PO3T1985]

@d3sre Thanks, really enjoyed it. Keep it up. Cheers

[PO3T @PO3T1985]

@4n6lady You're not alone. Don't be afraid getting the help you need. Went through my breakdown and subsequent panic attacks a couple years back. Two weeks in an institution an some therapy sessions really did help. 3 years witout any issues. Never been better since.

Take care.

[PO3T @PO3T1985]

@DissectMalware Congratulations, wish you all the best.

[PO3T @PO3T1985]

@abuse_ch I don't think AS3064 got the abuse complaint... my entry just celebrated its 4th anniversary online 😆 If I recall correctly, I uploaded this one before auto-complaint was sent out... maybe an issue?

[PO3T @PO3T1985]

@poqsec @GossiTheDog Patching yes, but inducing a full blown meltdown in C-level offices ain’t helping.

[PO3T @PO3T1985]

@Ledtech3 Didier usually posts use cases on SANS... also found this cheat sheet there: https://t.co/YBnKcyYbDt

[Josh Stroschein | The Cyber Yeti @jstrosch]

A great way to learn and practice new skills is through a #ctf. @CyberDefenders provides an excellent (and free!) platform to do just that. I've got a few challenges added there as well, check it out :)

🧩 https://t.co/pwYbHvtoXp

[PO3T @PO3T1985]

@jstrosch @CyberDefenders Thx

[PO3T @PO3T1985]

@fabio_viggiani Uh, that sounds interesting… looking forward to the results :)

[PO3T @PO3T1985]

@campuscodi @jivesx Pi ñata

[Simon J. Bell @SimonByte]

I wanted a way to monitor trending CVEs on Twitter

So I built https://t.co/YiHEgCQ2y9

- data comes from Twitter + NIST NVD APIs
- back-end: Python, Flask, PostgreSQL, and Redis
- front-end: React + Bootstrap

It's a quick MVP, but let me know your thoughts and feedback...

[PO3T @PO3T1985]

@Ledtech3 @sans_isc You mean the Dridex ones?

[PO3T @PO3T1985]

@seckle_ch @swisscom_csirt Yep, agree.

[PO3T @PO3T1985]

@swisscom_csirt seems its the time of the year again. Malspam being sent in your name.

SMTP: h2952048.stratoserver[.]net [85.214.214.224]

URL: hxxps://ferfrekjfer-s-school[.]thinkific[.]com/

Im getting 403 in my sandboxes, no detection from VT. My best guess: cred phishing