Collin Farr

Recovering Fed | Threat Intel Research

[vx-underground @vxunderground]

In case you missed it: Security researcher @RayRedacted has a son named Sam. Sam set the Men's World Record at the Paris Olympics this year for speed climbing. Sam successfully climbed 15 meters (49 ft) in 4.74 seconds. The average Olympic athlete age is 27. Sam is 18 years old.

[J. A. Guerrero-Saade @juanandres_gs]

This was the most important tough love keynote CTI has needed to hear and desperately needs to digest, otherwise “…reorgs will continue until perception of value improves” (h/t @invisig0th) #PIVOTcon24 #TheFanciestBear

[💻 Sherrod @sherrod_im]

Allison!!!

[vx-underground @vxunderground]

POV: you've been trying to solve a computer related problem for 8 hours and its dinner time

[Collin Farr @CollinFarr]

Had a blast talking with our friends over at @GreyNoiseIO, thanks again for having us on. Go give the episode a listen for some interesting news in the emerging threats world.

[Trinity Cyber @TrinityCyber]

.@AlteredBytes, Trinity Cyber’s VP of Threat Analysis & @CollinFarr from our rockstar Threat Intelligence team joined @GreyNoiseIO on the Storm Watch podcast. Tune in for an insightful & wide ranging convo on the latest cybersecurity news & learn more about our cool technology.

[Collin Farr @CollinFarr]

@sherrod_im This is the content I come to Twitter for 😂

[Silas Cutler (p1nk) @silascutler]

The work from the folks behind @CNMF_CyberAlert is exceptional. The folks on their team collaborate and respect others as peers. They build trust and honor it with every interaction.

https://t.co/2mqSMdWSYM

[Trinity Cyber @TrinityCyber]

Adversaries are remotely exploiting the #MOVEit file transfer app as part of a global hacking campaign against high profile orgs. SQL injection is the core technique behind all CVEs related to this campaign. Trinity Cyber natively prevents SQLi attacks against MOVEit systems.

[Collin Farr @CollinFarr]

@sherrod_im CISA, no question

[Tom Hegel @TomHegel]

Ever thought about tweeting a censys query on some APT infra tracking method?

#threatintel

[J. A. Guerrero-Saade @juanandres_gs]

Watch @struppigel reversing the SmoothOperator ffmpeg.dll and explaining Authenticode signing abuse :D Hope he keeps going with the infostealer.
https://t.co/f1KzS2GYmG
https://t.co/O9bGNerFrw

[Thomas Roccia 🤘 @fr0gger_]

🔍If you are looking for a comprehensive overview of the current #3CX supply chain attack, I created a diagram that shows the attack flow!💥I'll update as soon as the analysis progresses. Stay tuned for the MacOS edition! #cybersecurity #infosec #supplychainattack #3CXpocalypse

[Collin Farr @CollinFarr]

@sherrod_im I miss him 😭

[vx-underground @vxunderground]

Our friends at @SentinelOne were kind enough to hook us up and help us out. We have the opportunity to gift a talented researcher a valuable prize whereas without them the best we could do is a $5 coupon to Arbys.

Submit your unique and novel research to https://t.co/OKIrGXUPZt

[SentinelLabs @LabsSentinel]

New SentinelLabs Research on WIP26 - https://t.co/tTYD2ILjCE

🟣 New actor targeting telco in the Middle East
🟣 Abuses Microsoft 365 Mail, Google Firebase, and Dropbox for C2
🟣 Targeted WhatsApp msgs -> Dropbox -> loader -> backdoors

@milenkowski @CollinFarr @joeychen @QTrust

[ɪ ᴀᴍ ɴᴏᴛ ᴋᴀʏᴛʀᴀɴᴀᴅᴀ @chaclobro]

This list got me HOLLERING

[vx-underground @vxunderground]

Download your military-grade cyberweapons at https://t.co/CJueLIpTMg

[Mr. Rc @rcx86]

Malware analysis tutorials: https://t.co/a4gS0ltMiO

#infosec

[Quilleon @KidQuill]

I appreciate the patience more than you know. In a world where music comes and goes, been trying to make something that really sticks w people.

It’s all been a process, a fun one. Almost ready to share. It’s the best version of me you’ve heard yet.