Steve Schumm

Civilian Cyber Plumber. Former Mandiant, Xoogler. Team #GSD

[Steve Schumm @SchummCyber]

@Polymarket Maybe the U.S. based entity connected to a Ukrainian drone company?

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft is investigating mistralai PyPI package v2.4.6 compromise. Attackers injected code in mistralai/client/__init__.py that executes on import, downloads hxxps://83[.]142[.]209[.]194/transformers.pyz to /tmp/transformers.pyz, and launches a second-stage payload on Linux. The file name transformers.pyz appears deliberately chosen to mimic the widely used Hugging Face Transformers library and blend into ML/dev environments.

The main payload is a credential stealer, but it also includes country-aware logic; it avoids Russian-language environments and contains a geo fenced destructive branch that has 1-in-6 chance of executing rm -rf / when the system appears to be in Israel or Iran.

To mitigate this threat: isolate affected Linux hosts, block 83[.]142[.]209[.]194, hunt for /tmp/transformers.pyz, pgmonitor[.]py, and pgsql-monitor.service, and rotate exposed credentials.

[Justin Elze @HackingLZ]

Sigh

[Steve Schumm @SchummCyber]

@tanuki42_ @aptwhatnow 😂🤣

[Eric Daugherty @EricLDaugh]

🚨 IT’S OFFICIAL: The leftist agitators are paid and got CAUGHT packing up all their equipment after clocking out of their designated protest time

David Khait got the entire thing on video and they’re furious

It’s COMMUNIST DOLLARS!

[Steve Schumm @SchummCyber]

@m0bilej0n @endingwithali Rust

[Steve Schumm @SchummCyber]

@JasonAtwell14 @ImposeCost It’s very hard to remain objective and apolitical when videos resurface of campaign rhetoric from Obama, Biden or Clinton from 10 to 15 years ago talking about strong border security, firm immigration reform, or strategic strikes on the homes of narco-terrorist leaders.

[Steve Schumm @SchummCyber]

@MattyBlacksburg If they don't take Coach O to El Rods, Whit Babcock better be riding the first hooptie outta town

[Steve Schumm @SchummCyber]

@treadmillhorse This.
https://t.co/wvb4ODaDZl

[Aug @LunchM0n3ey9090]

I’m looking for a new role! Looking for a solid team, either red or blue team, where I can contribute and work with my teammates towards positive outcomes. In the past I’ve done/been in these positions:

-Senior CTI Analyst
-MDR Soc Analyst/IR (40+ Ransomware incidents)
-Red Team Operator
-Pentester

In my free time, I do some moderate malware analysis as well.

Able to provide resume on request.

Cheers!

[Steve Schumm @SchummCyber]

New iOS just torches your battery. Get ready for new allegations of Apple throttling older models

[Steve Schumm @SchummCyber]

@VT4L_Joe You mean 0-2? Or are you counting other sports?

[Steve Schumm @SchummCyber]

@treadmillhorse Bottom line: you need to be able to recruit, work the transfer portal, develop players, call a good game, make adjustments, and get the best out of your guys.

I don’t think we’ve seen Brent Pry successfully accomplish 90% of those responsibilities. Certainly not consistently.

[Steve Schumm @SchummCyber]

@SharpFootball Warren, are you a Hokie?? We may need you to chip in to get rid of whit and pry. #clowncar

[Steve Schumm @SchummCyber]

Whit Babcock botched the easiest decision in NCAAF history.

Make Bud Foster head coach in 2016 and make Shane OC/ Assistant HC until he was ready to run the program.

Given what we know now about the Balleins and Tim Sands, that was clearly the safest and smartest move.

[Steve Schumm @SchummCyber]

@hokiesby90 How bad does it get before someone throws in the towel

[Steve Schumm @SchummCyber]

No reason to panic. We’re really optimistic about this team this year. #hokies #pry

[SLEUTHCON @SLEUTHCON]

Eric Loui from CrowdStrike gave a talk at SLEUTHCON this year on RADIANT SPIDER, a Chinese cybercrime group that has been targeting North America + East Asia since 2022.

Learn more about their intrusion tradecraft and attribution.

https://t.co/pACsEHzVD1

[Steve Schumm @SchummCyber]

@AndrewBrandt Good data point Andrew. Do you want to discuss how the Commanders have the second lowest hit rate on draft picks during the Rivera years of all NFL teams? Or that Terry McLaurin is the first player since Joe Gibbs first tenure to receive a third contract?

[RMNB @rmnb]

Pierre McGuire is returning to hockey broadcasting https://t.co/YwDH66opLu