PhysicalDrive0

Malware Hunter / I've already taken the red pill!

[Anton Ivanov @antonivanovm]

We found one more #zeroday exploit that was used in APT.
https://t.co/GzBV3hNGk1

[Ajax @commial]

Now, Sibyl can be called from @GHIDRA_RE (https://t.co/0ZafEgqqAH) or use it headless for function address discovering (https://t.co/GKnPOpZ3Ww) :)

[Souhail Hammou @Dark_Puzzle]

Circumventing Windows Defender ATP's user-mode APC Injection sensor from Kernel-mode : https://t.co/C5hCmTCtyo

[PhysicalDrive0 @PhysicalDrive0]

Operation #ShadowHammer Sample MD5 aa15eb28292321b586c27d8401703494
https://t.co/F9RC3TvNLl #Asus #Susafone

[PhysicalDrive0 @PhysicalDrive0]

@Ledtech3 nothing surprises me anymore.

[PhysicalDrive0 @PhysicalDrive0]

WINRAR EXPLOIT BUILDER
Select your malware file and upload it and your malicious RAR-file will be created
hxxp://lofi.stream cve-2018-20250

[PhysicalDrive0 @PhysicalDrive0]

CVE-2019-5786 Chrome 72.0.3626.119 stable FileReader UaF exploit for Windows 7 x86
https://t.co/jzLZ7EktKs

[360 Threat Intelligence Center @360CoreSec]

Microsoft fixed a Windows 0day (CVE-2019-0808) in Patch Tuesday. Our team constructed the POC and reproduced the vulnerability triggering process. Click here to read more: https://t.co/aE6l1nPwnw

[Anton Ivanov @antonivanovm]

One more #zeroday exploit was used in APT attack.
https://t.co/Xi65dxhLkt

[PhysicalDrive0 @PhysicalDrive0]

@_jsoo_ @KorbenD_Intel APT32

[Chaouki Bekrar @cBekrar]

Google discovered a Chrome RCE #0day in the wild (CVE-2019-5786). Reportedly, a full chain with a sandbox escape: https://t.co/Nxfrvr5wIh

In 2019, I expect epic 0days to be found in the wild: Android, iOS, Windows, Office, virtualization, and more. Stay safe and enjoy the show.

[PhysicalDrive0 @PhysicalDrive0]

#WinPot Sample MD5 821e593e80c598883433da88a5431e9d #ATM
https://t.co/t0OC1zpuMF

[Securelist @Securelist]

Meet #ATMPot - the ATM malware designed to automate the dispensing of cash from a popular range of ATM machines.

The designers even went to the trouble of making the interface look like that of a slot-machine.

Learn more: https://t.co/ySjRVGt1Tc

[PhysicalDrive0 @PhysicalDrive0]

#GandCrab V5.2 @BitdefenderLabs

[PhysicalDrive0 @PhysicalDrive0]

@tamas_boczan @demonslay335 but this is a constant mood "AnaLab_sucks"

[PhysicalDrive0 @PhysicalDrive0]

A curated list of IDA x64DBG and OllyDBG plugins
https://t.co/GkPPxXkl4O

[PhysicalDrive0 @PhysicalDrive0]

#KerrDown Sample SHA256 e56ffcf5df2afd6b151c24ddfe7cd450f9208f59b5731991b926af0dce24285a https://t.co/YiD61t0y3s
#APT32 #OceanLotus

[Vitali Kremez @VK_Intel]

2019-02-08: #ExileRAT Group:
"CVE-2017-8759" altered toolkit "get_robin.py" server thread w/ local logging
{ SHELLCODE1 = 'sc.dat' as JScript | LOG_FILE = 'robins.log' }
h/t @PhysicalDrive0
Original Research 👍 ->
https://t.co/jf5j4FWVTz

[PhysicalDrive0 @PhysicalDrive0]

#ExileRAT is still up n running
hxxp://27.126.188.212/2//

[PhysicalDrive0 @PhysicalDrive0]

@ValthekOn https://t.co/aqrz8LzFPf
It's an odd obsession

[PhysicalDrive0 @PhysicalDrive0]

GandCrab HTTP Traffic https://t.co/a1uKx3hclc