Amila P.

Senior Associate | Managed Cyber Defence, Cyber Threat Operations at PwC

[Alexandre Borges @ale_sp_brazil]

Are you learning reversing and malware analysis? Sometimes details matter... ;)

#malwareanalysis #reverseengineering

[🔎Julia Evans🔍 @b0rk]

examine your program's memory with gdb

[Lloyd Davies @LloydLabs]

The Kaseya sideloaded DLL, a thread:

* If launched as a service, sleeps for 1000ms indefinitely
* If ServiceCrtMain is called, main malicious logic is unwrapped
* Initial payload is unpacked, XOR'd using a calculated key and execution continues

1/?

[Alexandre Borges @ale_sp_brazil]

In malware analysis, the focus is on binaries and their details (C2, persistence, injections/hooking, anti-forensics techniques). On the other hand, maldocs are trivially simple to solve and most of them take 5 minutes or less to collect information. Don't waste time.

#malware

[Amila P. @amilamx]

6 RFCs for understanding how the internet works https://t.co/ATe9JRf2tA via @opensourceway by @FunnelFiasco

[raptor @0xdea]

The upcoming #Ghidra version 10 is full of new juicy features! Including the much anticipated debugger…

https://t.co/OTKkJrdkK7

[USW Cyber Security & Digital Forensics @USW_NCSA]

Good luck @DCryp3t working hard with his team #QuantumOfPolicy to prepare for the #Cyber912 finals next week. A great opportunity for @KeeleUniversity @durham_uni @BristolUni @UniSouthWales students to experience cyber security at the highest level @Cyber912_UK @AtlanticCouncil

[Amila P. @amilamx]

Excited to see that the official release of Snort 3 is here! Well done @TalosSecurity @Cisco Look forward to try it 👍👍👍 https://t.co/jQQ9FU4NAL

[\_(ʘ_ʘ)_/ @pollo290987]

#Emotet is back and ...

+ Documents are protected: "Restrict Editing"
+ They use in the macro: ParagraphStyle
+ And dll are signed by: FRVFMPRLNIMAMSUIMT

[Amila P. @amilamx]

Love this 😀

[Amila P. @amilamx]

Interested charts by Microsoft Intelligence Team about Solarwinds Supply Chain attack. https://t.co/V0BieSgTDZ

[Amila P. @amilamx]

Our own @USWCybers student Jack Tabash(@_ta_bash) @UniSouthWales featured in Charted Institute of Information Security @CIISecHQ magazine under outstanding Cyber students in 2020. Proud of you Jack. 👋👋👋 ⭐️🏅 #CyberSecurity

[University of South Wales @UniSouthWales]

We’ve been named an Academic Centre of Excellence in Cyber Security Education by the National Cyber Security Centre @NCSC, receiving a Gold Award. 💻🏆

We are one of eight "pioneering" universities who received this recognition by this new government programme.

#CyberSecurity

[Amila P. @amilamx]

@dr_plegg @USWCybers @USW_NCSA Congratulations to you too @dr_plegg and @UWEcyber 👏👏👏

[Amila P. @amilamx]

Delighted to see our commitment has recognised to become one of the eight ACE-CSEs in the country. Well done @USWCybers @USW_NCSA.

[NCSC UK @NCSC]

They aced it!

Eight UK universities have become the first in the country to gain recognition for their commitment to cyber security education in the new ACE-CSE programme https://t.co/7US8Vf3BHv

@DCMS

[Amila P. @amilamx]

Good talk about the Behavioural Aspects of Repeat Victimisation in Cyber Crime by @SGCorreia @APWG 2020 E-Crime research Symposium

[Sara Correia-Hopkins @SGCorreia]

The last day of @APWG fantastic #eCrime2020 is all about the behavioural aspects of cybercrime and I will be talking about repeat victimisation. See you there! #phishing #CyberSecurity #spam #infosecurity @CYTREC_

[Amila P. @amilamx]

Cisco Zero-Day in AnyConnect Secure Mobility Client Remains Unpatched(Exploit Code Available): https://t.co/OaoGbyGhxj via @threatpost

[Mauricio Amaro L. 🇨🇱🇲🇽 @CioAmaro]

How to thwart human-operated ransomware campaigns? - Help Net Security https://t.co/qbbFWrmhwY
#Infosec #CyberSecurity #CyberAttack #Hacking #Privacy #Threat #Malware #Ransomware #Cyberwarning #Phishing #SpyWare
#Tech #Technology @CioAmaro

[Amila P. @amilamx]

Researchers are warning of a phishing campaign that pretends to be an automated message from Microsoft Teams. In reality, the attack aims to steal Office 365 recipients’ login credentials.

[TSecrime @tsecrime]

RT @nerccu: Microsoft #Office365 beware of a #phishing attempt that claims to notify you of a "missed chat" from #MicrosoftTeams. #cyberprotect #cybersecurity #cybercrime #cyberattack #microsoft #o365