@[email protected]🇵🇭🇺🇸🏳️‍🌈

fighting malicious traffic by moonlight 🌙. she/her.

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

✨I am happy to drop this #shazhupan / #pigbutchering research alongside @infosectimmy today! ✨

[Threat Insight @threatinsight]

Haunted houses... scary movies... and pig butchering? Fit for the #spooky season, this blog details a nightmare come true for victims of #ShaZhuPan threats.

Over the last 3 months, we engaged w/ threat actors to understand how this threat is employed. 👉 https://t.co/q523TvSEag

[ET Labs @ET_Labs]

#TOAD attacks (telephone-oriented attack delivery) are effective and dangerous! In this explainer, our own @bingohotdog describes our alerting methodology and gives guidance on triaging and responding to our alerts! https://t.co/YLVP4PRMvf

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

@infosectimmy Thanks Tim 🧙‍♀️🔥

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

This was a great talk! Very applicable for Suricata rule writers who want to sanity check their work.

[Proofpoint @proofpoint]

It's time to sip tea and solve mysteries about today’s most interesting threats. Another episode of Only Malware in the Building is here!

On this episode, Selena, Dave and Rick discuss the use of AI in cyberattacks.

Listen now on your streaming platform! https://t.co/TZi3EvCUxv

[Andrew Northern 𓅓 @ex_raritas]

I don’t know stuff every day and that’s my favorite part of my job.

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

@tuxish @Suricata_IDS Such impactful work!

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

Put it on the agenda folks! 👀

[SANS DFIR @sansforensics]

🏔️ Join us at #DFIRSummit when @jacoblatonis will discuss leveraging #Ghidra plugins to automate reverse engineering tasks. He'll show how to build a plugin to aid in reverse engineering Gameboy games and the information embedded in them.

➡️ View Agenda: https://t.co/x2grraya8I

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

visualizing my #suricata world so the barrier to entry is lower for all users : )

[ET Labs @ET_Labs]

On our #Discourse site our own @bingohotdog posts about how a rule matriculates through our support states, visible by its categories in the #Suricata and #Snort rulesets! Take a look here:

https://t.co/3M8waYoBHT

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

shout out to @obsdmd for creating a great note taking tool! i loved using it to keep track of my research

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

the true mystery box was finding the cred phish landing page amongst the spam samples!

[Threat Insight @threatinsight]

This week, @Proofpoint identified a credit card phishing campaign using @EURO2024 Championship as lure themes. Email were written in French, and senders/subj included:

From: "UEFA EURO 2024" USEROTH05---E148@c3nguyentrungtructt[.]edu[.]vn
Subj: "votre UEFA EURO 2024 Mystery Box"

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

@jufajardini @Suricata_IDS @LukasSismis @devconf_cz @outreachy @hsadia538 what a crowd! great delivering relevant content for Suricata users, @LukasSismis and @jufajardini

[ET Labs @ET_Labs]

And even closer to home - beware of game cracks hawked on youtube - the @threatinsight team has identified multiple cases where channels are promoted quick-wins via cracks and pirated that end up in #Vidar and #Lumma #stealer #malware infections!
https://t.co/Tcw1klLnFZ

[Kyle Cucci @d4rksystem]

In case you didn't know, #VirusTotal has this (new?) feature that can generate hunting rules for files and URL's in one click 😍

It's hidden in the "Follow" menu.

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

Hat tip to @BushidoToken for providing @ET_Labs with this phish investigation and giving me something fun to work on today 😎

[Will @BushidoToken]

Classic @RoyalMail parcel delivery themed iOS iMessage phish quick investigation thread 🔎🧵

Sender:
alycestroman5hkt[@]gmail[.]com

URL:
hxxps://gb-ryzutt[.]top/postl

1/n

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

@ex_raritas Thanks Andrew! Ya, folks can find Tony and myself on Mastodon as @[email protected] and
@[email protected]. ✨

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

@ex_raritas @Sam0x90 @MichalKoczwara i'm in awe with the fingerprinting work that @4A4133 and others continue to develop. omg i need to chat with you and @greglesnewich about how you'll hunt with these.

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

@sherrod_im 🌭🌭🌭

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

@ET_Labs @Jane_0sint i love that my daily work includes collabing alongside such talented folks. shout to the ET team members that helped me craft the Discourse post below \o/

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

chaotic reading is at @ 20:00 mark! 🤠🤠🤡

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

ty for letting me share the unhinged "Clint Eastwood will die soon" email that i found years ago! it lives rent free in my mind.

[@[email protected]🇵🇭🇺🇸🏳️‍🌈 @bingohotdog]

such a shame we couldn't use AI Clint Eastwood to read the letter or play cowboy music