Peter J. Marzalik

Intel Solutions Advisor @Intel471Inc, formerly @ZeroFOX @LG_Cyber @AtlanticCouncil @BSISCS, Proud @ElliottSchoolGW @OhioState Alum. Views are my own.

[John Fokker @John_Fokker]

Excited to announce our partnership with @Intel471Inc and the other expansions to our @Trellix threat intelligence portfolio. Check it out!!! @TrellixARC

https://t.co/zxVXFfRRlZ

[Intel Takes @inteltakes]

In case you missed it, few weeks ago Russian Intelligence Service #SVR launched their own magazine called “Rasviedchik” (Intelligence officer). Let’s look into best gems of the first issue 1/🧵

[The Associated Press @AP]

Cedar Point, an amusement park in Ohio, will permanently close the world’s second-tallest roller coaster after  a small metal object flew off the 420-foot tall Top Thrill Dragster coaster and struck a woman in the head last year. https://t.co/1470y4kuVl

[Visegrád 24 @visegrad24]

Someone hacked Russia’s largest taxi company and ordered all available taxis to central Moscow, creating huge traffic jams in the city.

The Russians don’t have a monopoly on hybrid warfare.

[Will @BushidoToken]

New blog: Analysis of the emerging Darth Maul eCrime Market

🔗 https://t.co/7uAQN9cmpx

#darkweb #darknet #cybercrime #cti #threatintel #ecrime #forums

[Spy Collection @SpyCollection1]

#SpyQuotes

#IntelligenceBranch #Canada

[Intel 471 @Intel471Inc]

Here's a complete rundown of why organizations should -- and shouldn't -- worry about the hacker group, #KillNet. Get the latest from @Intel471Inc: https://t.co/KSPHUxu2wX

[Valéry Rieß-Marchive | @valerymarchive.bsky.social @ValeryMarchive]

Did you notice? The DLS for #LockBit 2.0 hides something that very much looks like a... counter, at least for the #ransomware victims for which a stolen files disclosure had been planned. I decided to take a look into it. ⬇️

[ThreatDown @Threat_Down]

🚨 Our latest blog covers #APT28's first shot at leveraging the #Follina vulnerability to target Ukraine, amid fears of nuclear war.

https://t.co/cDMv7NPmbV

[DarkFeed @ido_cohen2]

🌐 After 28 days without any new victims, most of Conti #Ransomware infrastructure is down 🚨

This is the end? or a new start? 🧐

#Conti

[Arvind Narayanan @random_walker]

Information security research has long established three best practices for websites to help users pick stronger passwords. In a new study, we reverse engineered 120 popular English language websites, and found that only 15 (!) of them follow these guidelines. 🧵

[NetBlocks @netblocks]

ℹ️ Confirmed: Network data corroborate reports of a disruption to internet access in parts of British Columbia, #Canada, 7 June.

The incident is attributed to the activity of a single beaver, which gnawed through a tree that then fell on fiber cabling 🦫

https://t.co/YVnuUAJotK

[ESET Research @ESETresearch]

Before the invasion, Russia was typically excluded from ransomware target lists, probably due to criminals residing there or fearing retribution. T1 2022 hints at a possible change as Russia faced the highest proportion of ransomware detections (12%). 3/5

[Amigo-A @Amigo_A_]

A new article in Digest #StopWarInUkraine #Ransowmare or #StopWarInUkraineLocker
https://t.co/ymngXkN64h
Extension: .freeukraine
Note with requirements on screen. From Poland.
The iteration of common phrases from which there is no sense.

[Intel 471 @Intel471Inc]

Ransomware crews need access to launch their attacks. This is who is selling it to them. https://t.co/6EzkHlbBAP

[John Hammond @_JohnHammond]

I made a video chatting about CVE-2022-30190 #Follina #MSDT vulnerability, hopefully digestible enough that you can share it with folks to help them get up to speed. Credit and kudos to all the infosec titans leading the charge... it takes a village :)
https://t.co/2QiJWv1tLA

[BleepingComputer @BleepinComputer]

New Microsoft Office zero-day used in attacks to execute PowerShell - @Ionut_Ilascu
https://t.co/INC2jlGKdP

[Intel 471 @Intel471Inc]

Intel 471 remembers and honors U.S. service members for their ultimate sacrifice to defend our freedoms. #MemorialDay

[Somdev Sangwan @s0md3v]

🚨 ALERT 🚨

Python's ctx library and a fork of PHP's phpass have been compromised. 3 million users combined.

The malicious code sends all the environment variables to a heroku app, likely to mine AWS credentials.