Steve

CISSP, GWAPT Security researcher, Pentester, web app hacker, malware hunter, techno luster, nootropic/Biohacker, and an all around geek

[Steve @cheapbyte]

@theamelia__ I see hope and a face

[Steve @cheapbyte]

@Tr3ndyJon @UsePeakBot Hi Jon, I am trying your SPX alerts of which are great, a bit tough sometimes due to full time job so Trendy FLy bot has my interest, is there a daily P/L that could be shared, I know the Peakbot site says 105.4% annualized return, 8.8% per month avg. Thank yuo.

[Steve @cheapbyte]

@JDVanceNewsX The Feds are requiring real ID to travel why not require real ID to vote?

[Steve @cheapbyte]

@hasherezade @bmmaloney97 Maybe the cat represents something deeper like over watch, spying 🙃

[Steve @cheapbyte]

@hasherezade I will have to give it a try and see how it draws me, maybe Dr David Banner or Lou Ferigno 😂

[hasherezade @hasherezade]

The last release of #TinyTracer for this year: v2.9.5 : https://t.co/qvbQqaUXQE . Added ability to follow child processes (thanks to @red5heep). Improved tracing of #VMProtect - protected executables.

[Steve @cheapbyte]

@MalwareJake The reality is that this issue could have happened to any security company and has happened to McAfee, Norton etc, granted 8 million systems didn’t go down, I doubt McAfee ever covered that many systems

[Steve @cheapbyte]

@MalwareJake Agreed

[Steve @cheapbyte]

I opened a ticket and Cisco said I would have to submit a feature request, what a joke.

[Steve @cheapbyte]

@CiscoUmbrella All customers of Cisco Umbrella, be aware that if you have destination lists with more than 5,000 entries, Cisco has turned off security auditing. This happened around August 2022 when engineering decided to implement the 5,000 limit withOUT notice

[Steve @cheapbyte]

After many customers outraged at the change, Cisco removed the 5,000 limit of entries but never removed the 5,000 limit of auditing, check your audit logs, no entries of destination list changes, Audit issue? Yes

[Mick Douglas 🇺🇦🌻 @bettersafetynet]

Not enough people know about Hayabusa.
https://t.co/TpTtJZB2ub

Hands down one of the best tools to use on assessments of all sorts (threat hunting especially!)

[hasherezade @hasherezade]

To whomever it concerns: I am NOT in any ways affiliated with Azov (or any other #ransomware). It’s a common practice among cyber criminals to try to frame security researchers.

[hasherezade @hasherezade]

New #TinyTracer (v2.7) is out:
https://t.co/hNcO4b3zJ9

[Joseph Carson - Security Researcher @joe_carson]

@Fox0x01 an awesome and thought provoking keynote -really enjoyed

[Steve @cheapbyte]

@ip2location 8.8.8.8

[mgeeky | Mariusz Banach @mariuszbit]

IMAP Password lying out there in Registry in DPAPI-encrypted form. Worth adding Seatbelt collection support? :-)

HKLM\Software\Microsoft\Office\16.0\Outlook\Profiles\Outlook\9375CFF0413111d3B88A00104B2A6676

Simple CryptUnprotectData() will do to decrypt it.

[James @James_inthe_box]

New #stealer #clipper #keylogger #stealerium:

https://github[.]com/Stealerium/Stealerium

now in the wild:
https://t.co/w4PPxxILO8

cc @vinopaljiri @c3rb3ru5d3d53c @3xp0rtblog @sanjuanswan

[James @James_inthe_box]

Sizable #smtp cred #bruteforce happening now from 183.92.0.0/14

cc @bad_packets