apurva

Mobile Security Researcher @ MSFT.
Sessional lecturer @ McMaster University.

Threat intelligence and malware reverse engineering.
#CTI #infosec

[apurva @abby_kcs]

A blog on some long running research @kristindelrosso and I worked on for a while. (shoutout @terminalrift):
Hornbill and SunBird are state-sponsored surveillanceware with roots in commercial stalkerware/spyware. https://t.co/2iJfSDIAZA

[Microsoft Threat Intelligence @MsftSecIntel]

The mobile platform is perfect for surveillance, & actors are using various techniques to steal info from mobile devices. Learn more in this Microsoft Threat Intelligence podcast episode with @x71n3, @lauriewired, @abby_kcs, & host @sherrod_im https://t.co/nDXzK4uh3n

[Maddie Stone @maddiestone]

I'm so thrilled that we're getting this out to share and so thankful that I got to work with some incredible people on this: @auroracath @k_dennesen @az_matazz @charley_snyder_ @Kimberly_Samra @_clem1

Go check out the full 50 page report:
https://t.co/D6KGgQgMiz

[John Scott-Railton @jsrailton]

8/ Bonus from @Google TAG: super helpful chart of some key players.
Of course, familiar names like NSO Group, Intellexa & Quadream, but also signs of the smaller market players (a growing part of the problem).

Journalists, this is a fantastic list of companies to scrutinize.

[Matt Johansen @mattjay]

I can’t believe some of you are out here browsing the internet without uBlock.

Now google is making changes that will disable it?!

This is a game changer in the browser user share wars.

[billy leonard @billyleonard]

🚨 @Google TAG's @maddiestone in close collaboration with our colleagues at @citizenlab burning more 🍏 and 🤖 0days used against targets in 🇪🇬 in an effort to install Predator

https://t.co/0U5G0ekeyS

[The Hacker News @TheHackersNews]

🚨 Microsoft's warning: Phishing-as-a-Service is on the rise. Learn how AiTM techniques are used to bypass MFA protections.

Learn more: https://t.co/7C0maAuq8J

#cybersecurity #informationsecurity

[Omer Benjakob @omerbenj]

🚨SCOOP: My new @Haaretzcom investigation reveals new Israeli cyber companies developed technology that exploits the heart of the online economy - ads - not just for mass surveillance, but also to hack phones 👇

https://t.co/TPfBO1SZHP

[blackorbird @blackorbird]

APT Group #Confucius Android Malware SunBird's C2 Server
https://t.co/NmZaPFQR9r

[profdeibert @RonDeibert]

And don't t forget to update your software while you're at it. 👍

https://t.co/TGRHdNxh7M

[profdeibert @RonDeibert]

Canadian researchers discover spyware infecting iPhones without users ever clicking on anything https://t.co/5QNaF4pLYd via @torontostar @joshualdwchong reports 👇

[Maddie Stone @maddiestone]

North Korean actors 🇰🇵 are targeting security researchers again including use of at least one 0-day. IOCs in the blog ⬇️ If you've been in contact, please reach out

https://t.co/SiMq2tsNuY

[SwiftOnSecurity @SwiftOnSecurity]

Genuinely every Windows user should look through all the random capabilities PowerToys has. It can do TONS of stuff like window management. Really it's worth clicking and being aware of what you can do with it. It's a tools suite that's constantly updated.
https://t.co/G8j32OrrEd

[Ben Hawkes @benhawkes]

How can you show that a bug is exploitable without actually writing an exploit? Exploit equivalence classes. https://t.co/IvzRTkUBm8

[Kim Zetter @KimZetter]

Great story, with visuals showing near misses. US has shortage of air traffic controllers, which officials believe may be “leading to close calls, in which planes nearly crash. There were at least 46 near misses involving commercial airlines last month” https://t.co/h0OOEGGyl3

[The Hacker's Choice (@[email protected]) @hackerschoice]

THC RELEASE: How to bounce via Cloudflare when the attacker and the victim are both behind NAT (and how to extract WireGuard Secrets from WARP+). https://t.co/2FkpYeew8o #cloudflare #hacking #exfil

[Allan “Ransomware Sommelier🍷” Liska @uuallan]

Interpol takes down phishing-as-a-service platform used by 70,000 people https://t.co/MGnPbGWkLJ @TheRecord_Media & @daryna_antoniuk

[Canadian Centre for Cyber Security @cybercentre_ca]

#DYK you can forward it to 7726 (SPAM)? Doing so will help mobile service providers identify smishing messages which can help keep Canadians safe! You can also register your number to the national #DoNotCallList :
https://t.co/fjLJxje4u5

[Canadian Centre for Cyber Security @cybercentre_ca]

If you think you’ve received a smishing attempt, delete the message and block the number. Do not reply, even if the text tells you to text “STOP” or “NO”.

[Volexity @Volexity]

From the @Volexity #threatintel team: this blog post details #CharmingKitten's POWERSTAR malware, now with an InterPlanetary twist... Read more: https://t.co/vA6WZjRenO #dfir

[Maxime Rossi Bellom @max_r_b]

The slides of our talk at Recon 2023 "Dissecting the Modern Android Data Encryption Scheme" are now available online.

Thanks @reconmtl for organizing this great event.
https://t.co/vv2Z5zcTNQ