Pablo Rincon Crespo

Infosec ~,-,^.^ Tweets are my own. VP of Cybersecurity @Cylera_ . Protecting Medical Devices and Hospitals against Cyberthreats.

[Pablo Rincon Crespo @PabloForThePPL]

Quieres saber quién podría estar atacando hospitales de mas de 25 países con el malware Kwampirs (Orangeworm) desde Enero de 2015? El sábado a las 10:00 te explico las evidencias que hemos encontrado apuntando a los actores de shamoon en @rootedcon 2022

[Cylera @Cylera_]

Cylera published new evidence linking the developers of #Kwampirs and #Shamoon (especially Shamoon 2). Cylera has found an intermediate sample (a fork), and a template system in common between both families, and share significant coevolution. https://t.co/JxOkSpLb4b

[The Hacker's Choice (@[email protected]) @hackerschoice]

@patowc Ja! ja! That’s it. 🤪

[Pablo Rincon Crespo @PabloForThePPL]

@RAEinforma 3e2 https://t.co/s3EiHJ8q5x🍈zestaq1A🐵🦍🐈Re🍈🍈directed🍒🫐🫐🍇aeqq🍓

[Pablo Rincon Crespo @PabloForThePPL]

@techspence sounds like the comparison between a signature based AV and a malware analyst plenty of knowledge and tools.. they just can do/tell you what others already did, but lack of all the ninja skills.

[vx-underground @vxunderground]

Bram Moolenaar, the author of Vim text editor, passed away Thursday, August 3rd, 2023. He was 62.

[Pablo Rincon Crespo @PabloForThePPL]

@acorsinl Más que por presión fiscal se van por facilidad (coste) de financiación en otros mercados. En España solo tiene un 2% de facturación. Ya estaban fuera. Aún así España tendrá que poner algún mecanismo para facilitar la cotización en otras bolsas: Hipopotomonstrosesquipedaliersen..

[Pablo Rincon Crespo @PabloForThePPL]

@gf_256 Clearly training data must come from irc logs..

[Good Clothes Fair Pay @goodclotheseu]

📝Have you signed #GoodClothesFairPay yet?

We demand laws that protect the human right to fair pay. We want to see a living wage for the people who make our clothes around the world. The EU has the power to change this.

Add your name: https://t.co/LaC0YElfFm

[𝙹𝚊𝚟𝚒𝚎𝚛 𝙼𝚊𝚛𝚌𝚘𝚜 ⚡️ @javutin]

Great comparison of #rustlang VS. #golang by @JavierRamosRod https://t.co/2t0BreP1cn #rust #go #programming

[Virus Bulletin @virusbtn]

Cylera's @PabloForThePPL assesses with medium-high confidence that Shamoon and Kwapirs are the same group or very close collaborators, sharing updates, techniques and code over the course of multiple years. https://t.co/mk1djdC8ye

[Pablo Rincon Crespo @PabloForThePPL]

https://t.co/bry4WEvRor

[GriYo @griyo666]

I would like to propose this design for some #Virustotal t-shirts

[Pablo Rincon Crespo @PabloForThePPL]

Me gustaría dar las gracias a todo el equipo de Cylera Labs y colaboradores cercanos. En especial a Markel Picado ( @D00RT_RM ) y a Paul Bakoyianis (CTO de @Cylera_ ). Toda nuestra motivación ha sido la ciberseguridad de los pacientes en entornos hospitalarios.

[Pablo Rincon Crespo @PabloForThePPL]

Hoy en #RootedCon2022 hemos presentado los resultados de una investigación llevada a cabo en @Cylera_ sobre atribución técnica de #Kwampirs y #shamoon . Más info técnica aquí: https://t.co/WEMnKZ5Qte

[/RootedCON @rootedcon]

Pablo Rincón @PabloForThePPL de @Cylera_ abre el día en la sala 19 hablándonos de los enlaces entre asgámoos y Kwampira que todos los Hospitales deberían conocer.

Muchas gracias por compartir toda esta información con nosotros!!

[Pablo Rincon Crespo @PabloForThePPL]

@rootedcon @Cylera_ Muchas gracias a vosotros por darme la oportunidad de exponer los resultados de nuestra investigación sobre #kwampirs y #shamoon , y gracias por seguir año tras año haciendo posible el evento!

[Pablo Rincon Crespo @PabloForThePPL]

Do you want to know who could be attacking #hospitals in more than 25 countries with the #Kwampirs (#Orangeworm) malware since January 2015? Saturday at 10:00 I explain you the evidence we have found pointing to shamoon actors at @rootedcon 2022.

[Pablo Rincon Crespo @PabloForThePPL]

After some time investigating Kwampirs and Orangeworm at @Cylera_ we have medium-high confidence that the Shamoon 2 and Kwampirs developers are the same group, or maintain a very strong relation over the years. Check our findings of a common template system and shared coevolution

[Cylera @Cylera_]

Cylera published new evidence linking the developers of #Kwampirs and #Shamoon (especially Shamoon 2). Cylera has found an intermediate sample (a fork), and a template system in common between both families, and share significant coevolution. https://t.co/JxOkSpLb4b

[Pablo Rincon Crespo @PabloForThePPL]

@BleepinComputer
@TheHackersNews
@DarkReading
@ZDNet
@symantec
@UseAnalyst1
@LAB52io
@ReversingLabs
@virustotal
@McAfee_Labs
@blueliv
@Cylera_
@vxunderground
@virusbtn
@ibm
@Mandiant
#healthcare #hospitals #kwampirs #shamoon #wiper #cybersecurity

[blasty @bl4sty]

Hacked up a quick Dirty Pipe PoC that spawns a shell by hijacking (and restoring) the contents of a setuid binary. https://t.co/q8NtTlbgOZ

[Pablo Rincon Crespo @PabloForThePPL]

@campuscodi Check out an update on this topic. We have medium-high confidence shamoon2 and kwampirs developers are the same group or share a strong relation. We discovered a common template system that was developed first in kwampirs: https://t.co/WEMnKYOfBG

[Pablo Rincon Crespo @PabloForThePPL]

@TheHackersNews Checkout this update related to kwampirs. We have released it today https://t.co/WEMnKYOfBG