TheSphinx

#WebDeveloper #Malware researcher. #Senior developer. React, Python, C++, C#, VB, Java, Php. 🇮🇹 WannaBe #redteamer. ✏️ [email protected]

[John Hammond @_JohnHammond]

The MOVEit Transfer exploitation is not just SQL injection(👀)

We uncovered the very last stage of the attack chain to drop human2.aspx ultimately ends up gaining remote code execution ‼

We fully recreated the attack chain with a demo achieving a reverse shell & ransomware!

[hacker.house @hackerfantastic]

I asked GPT3 to rewrite one of my LPE exploits in Perl, Python, Rust and Fortran. It did a remarkably good job when the C code is clear and concise, original: https://t.co/Vo6bfwHh2i GPT3 in screens below.

[张惠倩 @momika233]

Cobalt Strike 4.7 by uCare (custom license)
Download: https://t.co/jnQsbl2tjW
Pass: uCare@Pwn3rzs

[BleepingComputer @BleepinComputer]

Chinese hackers use new Cobalt Strike-like attack framework - @billtoulas
https://t.co/GfCHikUOtO

[TheSphinx @__SPX__]

@MediasetTgcom24 attacco “ramsonwere” ?? 😩

[BC Security @bcsecurity]

Empire Ops: Tactics is a hands-on course at this year’s @defcon. We will teach how to recreate aspects of the #APT28 Prime Minister Attack while learning advanced #redteam techniques. #defcon30

Register: https://t.co/khUEbKUHxz

[Mike Driscoll @driscollis]

How to send a tweet with #Python and TweePy in under 10 lines of code

🐍🔥

[Virus Bulletin @virusbtn]

JPCERT/CC's @shu_tom writes about the Lazarus VSingle malware that has recently been updated to retrieve C2 server information from GitHub. https://t.co/vnGqyobPIk

[Cas van Cooten @chvancooten]

Kicked off my "MalDev for Dummies" workshop successfully yesterday, which means the repo is now public! Slides, exercises, example code and resources to get you started on your malware development journey. C# and Nim supported for now. Enjoy!!
https://t.co/Z8aQ41QvHQ

[_leon_jacobs(💥) @leonjza]

Poking at my toy C2, godoh, I managed to add #cobaltstrike's external C2 support. This is a beacon staged using DNS-over-HTTPS. It's nothing novel, but I had fun gluing together TCP sockets and DoH.

[Kim Dotcom @KimDotcom]

Now you know that Mega is not really a privacy company. It’s important to understand that those who control the code can create backdoors to defeat encryption. I know the lead developers. They lack morality. I recommend not to use Mega for sensitive files: https://t.co/tLWnWIEqI3

[The Hacker News @TheHackersNews]

A new version of the XLoader #botnet malware has been discovered that uses a probability-based approach to camouflage its command and control (C&C) infrastructure.

Read details: https://t.co/tHZihpFccF

#infosec #cybersecurity #hacking #malware

[vx-underground @vxunderground]

Lockbit ransomware group has named Lockbit 3.0 as "Lockbit Black".

[Cyber, etc... @cyber_etc]

Italy 🇮🇹 : the Italian #police website is accessible again but only from #Italy.
The site had been unavailable since May 16 following a #DDoS #cyberattack claimed by the pro-Kremin #Killnet hacker group.

#Ukraine #Russia
Via @giornalettismo

[Pascal Bornet @pascal_bornet]

In Japan, the school board is equipped with an electronic scanner. It erases what is written and at the same time stores it so that the students can get later copies if they want

Credit: Jousef Murad
#innovation #science #technology #engineering #education

@Fabriziobustama

[Pierluigi Paganini - Security Affairs @securityaffairs]

A custom #PowerShell #RAT uses to target German users using #Ukraine crisis as bait
https://t.co/E4yb22iKu4
#securityaffairs #hacking #malware

[Fulvius @IppocampoC]

Who are you? Here we go again.
This work belongs to @_Blue_hornet #ATW and was released on April 3 on Doomsec telegram channel https://t.co/TycEGrhKeZ

#AgainstTheWest #DoomSec

@YourPolandAnon @DeepNetAnon @arks414
#Killnet

[Fabrizio Bustamante Escudero @Fabriziobustama]

This #WEBSITE listens to your #keyboard by @DigitalTrends
#100DaysOfCode #CyberSecurity #AI #Python #ArtificialIntelligence
Cc: @Nicochan33 @jblefevre60 @chboursin @Ym78200 @mvollmer1 @PawlowskiMario @Shi4Tech @FrRonconi @sebbourguignon @sallyeaves @MargaretSiegien @kalydeoo

[Odisseus @_odisseus]

Intervista #esclusiva di @matricedigitale al gruppo hacker che ha attaccato l'Italia.
"Sono il fondatore di Killnet e di Legion. L’ho creato io, ma non voglio controllarlo. Stiamo formando migliaia di persone pronte a combattere la NATO in futuro."

https://t.co/tX6C4rYLIN