Adrian Hernandez

Threat Analysis in Advanced Practices🦅 @Mandiant @Google. Interested in CNE and Intelligence. Personal account, my opinions are my own.

[Adrian Hernandez @Sapphirex00]

The threat actors behind AVADDON were not new and they are likely not gone as long destructive attacks are profitable. They rebuild and evolve. Big shoutout to @HefrPidge and Ervin from Advanced Practices @Mandiant for joining forces with me in this blog https://t.co/GbxVUlAAXx

[Security BSides Dublin @BSidesDublin]

📢Demystifying APT42 Cyberoperations

5 minute warning. Demystifying APT42 Cyberoperations, will be starting in Track 1. Presented by Adrian Sanchez Hernandez @Sapphirex00 & Asli Koksal @asli_koksal

[Adrian Hernandez @Sapphirex00]

@CyberJack42 Disappointing. The end of an era.

[NK NEWS @nknewsorg]

NEW: North Korean cybercriminals stole over $1 billion in cryptocurrency last year despite diminishing returns from virtual heists across the world, according to a U.S. blockchain analytics firm.

https://t.co/erlGZN4574

[Adrian Hernandez @Sapphirex00]

@jfslowik @aptwhatnow

[Adrian Hernandez @Sapphirex00]

@lisaabramowicz1 The party is over

[aptwhatnow @aptwhatnow]

https://t.co/7Kg1DRZgoj In March of this year we began seeing similar blending efforts that we saw DPRK do during the pandemic, then 3CX popped off giving us more insight, then Andariel’s ROCKHATCH malware popped off with fingerprints of two other APTs in it….

[aptwhatnow @aptwhatnow]

JJ and I made a decision to detail what we were seeing and @Mandiant DPRK FC spent all of May and June gathering not just cyber data, but multi-sourced intelligence to develop the picture more fully. @Mgkarayan @AustinLarsen_ @TaylorLongg @Sapphirex00 and others …

[Jeongmin Kim @jeongminnkim]

As general elections loom, South Korea grapples with election security concerns https://t.co/sDOOFGNryN

[Adrian Hernandez @Sapphirex00]

@nicastronaut gorgeous

[Adrian Hernandez @Sapphirex00]

@Big_Bad_W0lf_ @lorenzofb It's the next Cypress Hill hit

[Adrian Hernandez @Sapphirex00]

@Big_Bad_W0lf_ @ImposeCost Do you read one book at a time or multiple assigning to each a particular time or moment throughout the day? I'm trying the second, finding it slower but more enjoyable due to the variety of topics, but wondering what's more efficient.

[Adrian Hernandez @Sapphirex00]

@RadioHacking @rootedcon @ChemaMezcua @BedisruptiveEs Estas slides o la charla son publicas?

[Adrian Hernandez @Sapphirex00]

@vxunderground I believe this was designed for companies and entities based in the Russian federation, not individuals

[Adrian Hernandez @Sapphirex00]

@Gigs_Security No data, just this 6 months old 3rd party pdf with 2 IOC and a doubtful attribution.

[Adrian Hernandez @Sapphirex00]

@nicastronaut Call it job insecurity, fear of missing out and other delights hitting hard millennials worldwide. Possibly tech industry gets the worst part due it its fast paced nature and volatility.

[Adrian Hernandez @Sapphirex00]

@x0rz can we make these t-shirts please

[Adrian Hernandez @Sapphirex00]

@Billxmichael vota al perro y enjoy the comments

[Adrian Hernandez @Sapphirex00]

@nicastronaut UFO retaliation

[Adrian Hernandez @Sapphirex00]

@Billxmichael of murder

[Adrian Hernandez @Sapphirex00]

@Myrtus0x0 From the top of my head: it's possible that whatever is using to encode/encrypt the strings is not designed or developed by him/her and its needs; or found errors decoding/decrypting the C&C and reading it properly prior passing it to its network module.