CyberPumpkin

[CyberPumpkin @Cyb3rPumpkin]

@JWilsonSecurity also interested

[CyberPumpkin @Cyb3rPumpkin]

@DarkWebInformer cyberleek 🥬

[CyberPumpkin @Cyb3rPumpkin]

@1ZRR4H @malwrhunterteam Same ASN in recent AMOS Clawdskill campaign reported by TrendMicro

[CyberPumpkin @Cyb3rPumpkin]

@SquiblydooBlog How about Outsource Genius LLC

[CyberPumpkin @Cyb3rPumpkin]

@HackingLZ we had it right with naming groups after malware ala the early kaspersky and symantec days. Anyone can compare malware samples. Now the paywalls of attribution methodologies make collaboration impossible.

[CyberPumpkin @Cyb3rPumpkin]

@SecurePeacock But how are they attributing to a STORM- group that isn't even listed in MS naming taxonomy??

Paywalled in one area?

[CyberPumpkin @Cyb3rPumpkin]

@cyb3rops @virustotal Lots of automated misattributions of malware

[CyberPumpkin @Cyb3rPumpkin]

@ex_raritas Ok but what about Skibidi

[CyberPumpkin @Cyb3rPumpkin]

@Gootloader @CrowdStrike It's quick, they aren't messin around

[CyberPumpkin @Cyb3rPumpkin]

@MsftSecIntel Cite the Rapid7 post?

[CyberPumpkin @Cyb3rPumpkin]

@passthehashbrwn @simplylurking2 Meanwhile Mandiant has named loads of Power-randomnoun APT malware

Yes no one has the full picture

[CyberPumpkin @Cyb3rPumpkin]

@n8s3c @sherrod_im Browser isn't exploited

[CyberPumpkin @Cyb3rPumpkin]

@DylanOwendylan @jfslowik Well then why not say something more substantial?

[CyberPumpkin @Cyb3rPumpkin]

@BushidoToken So who can exploit the backdoor? Anyone or just the author?

If just the author seems quite lucky to have been caught like this.

[CyberPumpkin @Cyb3rPumpkin]

@lordx64 source is down

[CyberPumpkin @Cyb3rPumpkin]

@BushidoToken No malware with a lot of attribution, the ICTIC model

[CyberPumpkin @Cyb3rPumpkin]

@tuxpanik @Cryptolaemus1 @ffforward @pr0xylife @ankit_anubhav @Max_Mal_ @JAMESWT_MHT @1ZRR4H @fr0s7_ @malwarelabnet @Myrtus0x0 @executemalware Can you share? Dm's are open. The unpacked DLL I suspect?

[CyberPumpkin @Cyb3rPumpkin]

@SecurePeacock Hey ChatGPT what are the event IDs associated with a penetration tester