Theo Chen

🇹🇼 Threat Researcher

[Theo Chen @The0_Klein]

@Sverrevh I've stopped using it for a while now, and the last code I used is what's currently in my repository. I do have plans to setup again and update to the latest official version (20.06.2~) but there is no definite schedule. DM is welcome if you need further discussion.

[Theo Chen @The0_Klein]

Deploy A Distributed T-Pot System For Personal Research In Budget - Part 2

Hello Filebeat :)

https://t.co/xaR5OhyKAC

[ESET Research @ESETresearch]

#ESETresearch unveils another APT group, #FamousSparrow, that exploited the #ProxyLogon vulnerability in March 2021 and carried out cyberespionage activities against hotels, governments and private companies worldwide https://t.co/3RSbX5xO7I @matthieu_faou Tahseen Bin Taj 1/6

[Daniel Lunghi @thehellu]

Our latest research on #IronTiger (APT27) is out ! We disclose a new method for dropping the SysUpdate malware that uses 5 files instead of the typical triad, as well as a rootkit that hides other threat actor's backdoors that we discuss in the blog https://t.co/c7vZZBW3rI

[Theo Chen @The0_Klein]

@ninoseki I've been waiting for them to use aaencode for a long time 😆

[にのせき @ninoseki]

The latest #MoqHao's ASCII emoticon based obfuscation makes me lol. ¯\_(ツ)_/¯
https://t.co/tDALZ406O5
(https://t.co/nOHuAn8X6y)

[Daniel Lunghi @thehellu]

For those who enjoy #APT attribution nightmares, here goes another one. During our #DRBControl investigation, we found some links to #Winnti and #EmissaryPanda. I recently stumbled upon the Secureworks' report about #MustangPanda https://t.co/rtcpy0gAwI and found yet another link

[Theo Chen @The0_Klein]

@ninoseki @051R15 Thanks for the notice.

[Theo Chen @The0_Klein]

Linux's Bitcoin Scam Live Stream on YouTube
https://t.co/JaRjnyOeoF

Original Video: https://t.co/JDsjMIEOcd

Scam Site: https://linuxgiveme[.]com/
BTC Address: 1PAYaU2NfAPpxosUZ2R62dotK4fnsEiB6Q

#scam #bitcoin

[Theo Chen @The0_Klein]

New #XLoader Variant

https://t.co/UszRcZD46Y

[Theo Chen @The0_Klein]

<(_ _)>

My Blog:
https://t.co/n9gppPpBxK

Talent-Jump Article:
https://t.co/FV4qV8HSud

Trend Micro co-authored report:
https://t.co/ET0qlyVIi2

[Theo Chen @The0_Klein]

@thehellu Thank you for your detailed research report!

[Daniel Lunghi @thehellu]

Threat actor linked to #Winnti and #EmissaryPanda/#LuckyMouse #APT groups targets gambling companies in South-East Asia with a new backdoor using Dropbox as C2. TTPs, post-exploitation tools and different malware families discussed in our report https://t.co/TWFyaGjoG9

[Theo Chen @The0_Klein]

An interesting situation

https://t.co/85n2f7eHQJ

[Theo Chen @The0_Klein]

#taipei #nightview #lightburst #lighttrail

[Theo Chen @The0_Klein]

練拍
彌補一下昨天公司中秋晚會拍煙火全部 Fail 的鬱卒
#waterfall

[Theo Chen @The0_Klein]

iPhone X with 0.65X 廣角鏡再加上一點浮誇的濾鏡

[Theo Chen @The0_Klein]

#NISRA
NISRA Enlightened 2018 Wargame
自建零成本監控環境

今年不再 lag 了，GCP 台灣機房連線速度真的快到飛起來

[Theo Chen @The0_Klein]

這合成引擎不得了
https://t.co/G697uQczcX

[Theo Chen @The0_Klein]

GCP 的台灣機房（asia-east1）速度真的快的沒話說