ScubaSteve

InfoSec, just here to lurk

[ScubaSteve @createdam0nster]

@paddycosgrave So salty

[Robert M. Lee @RobertMLee]

If you are in the US/UK/ANZ at a small co-op/muni & need ICS cybersecurity support (Dragos Platform technology, managed service, and incident response) please feel free to message me directly. Dragos is going to make our capabilities free for the smaller members of our community

[Zero_Chaos is fully up to date @Zero_ChaosX]

Only a fraction of servers with log4j will get hacked severely, you don't need any mitigations at all. It's basically the flu.

[GreyNoise @GreyNoiseIO]

Please find the following raw CVE-2021-44228 Log4J / Logshell payloads GreyNoise has detected thus far.

https://t.co/YsqaQr0Dtv

[Simon J. Bell @SimonByte]

I wanted a way to monitor trending CVEs on Twitter

So I built https://t.co/YiHEgCQ2y9

- data comes from Twitter + NIST NVD APIs
- back-end: Python, Flask, PostgreSQL, and Redis
- front-end: React + Bootstrap

It's a quick MVP, but let me know your thoughts and feedback...

[ScubaSteve @createdam0nster]

@vxunderground @HaboubiAnis Me too, about 150 of the accounts/RT been deleted in the last hour

https://t.co/KWrxcsr5A5

[ScubaSteve @createdam0nster]

Wow...will they try shoot their way out of this one.
#NRA #Murica #Grief #Ransomware

[ScubaSteve @createdam0nster]

Wow...will they try shoot their way out of this one.
#NRA #Murica #Grief #Ransomware

[ScubaSteve @createdam0nster]

@AvastThreatLabs @threadreaderapp unroll

[ScubaSteve @createdam0nster]

@sec_studio @pr0xylife 🍺

[ScubaSteve @createdam0nster]

#MirrorBlast

[proxylife @pr0xylife]

hxxp://185.10.68.235/
hxxp://185.183.96.147/?data=WORKGROUP:Xsarmgfy:Admin

@abuse_ch @ankit_anubhav @ffforward @executemalware @James_inthe_box @JAMESWT_MHT @Max_Mal_

[CR1337 @CR1337]

CryptoWhale AKA Randy: For those of you who don't know him, it is one of the most embarrassing figures on here.

He has been using 3 strategies to earn money on Crypto Twitter. Don't trust; verify. A thread of threads.

[Ax Sharma @Ax_Sharma]

EXCLUSIVE: Newly discovered #Azure flaw lets attackers brute-force Active Directory credentials in an undetected manner.

At this time, there's no way to easily block the endpoints used by Seamless SSO. #Microsoft seems to consider this a "design" choice.

https://t.co/ayyqjNOTUX

[Joe Morales @mojoesec]

#CobaltStrike

66.29.138.195
rismorf[.]com

128.199.5.124
osamoza[.]com

dataservices[.]cyou
103.25.188.188
divine-fog-b1e1[.]databucket23[.]workers[.]dev

3.13.117.124
azureedge-api[.]net

18.191.94.241
azureedge-endpoint[.]net

172.93.100.10
23.82.19.182
yabolog[.]com

[ScubaSteve @createdam0nster]

Nice work my man

[proxylife @pr0xylife]

#Trickbot - link to exe > hxxps://zoomdetails.members-only.online/
exe hash -fd083bc2dbc3426a332eaf861dea03c648ad04cb73ba8f09504c970af9134898

@malwrhunterteam @createdam0nster @executemalware @James_inthe_box @JAMESWT_MHT