DecayPotato

Lousy Threat Analyst, Retweet and post are my own

[DecayPotato @DecayPotato]

@UBTECHRobotics Hey, is there a way to reboot LYNX model into factory reset? As it is having issue to detect device.

[DecayPotato @DecayPotato]

@CIMBMalaysia @CIMB_Assists
What are you going to do about this scam?

Phishing email: alertfundsicicibankonline@gmx[.]us

[DecayPotato @DecayPotato]

@SteveClement could i have a DM with you regarding MISP.

[DecayPotato @DecayPotato]

@Twitter @TwitterSupport
Is there an option to pass group chat admin to other? or even promote someone into admin of the group chat?

[DecayPotato @DecayPotato]

So true
https://t.co/szqi4QGnUX

[DecayPotato @DecayPotato]

@evleaks Perfectly legit when the video is taken in a supermarket. Shop:
https://t.co/C1ZHSxEAII
Location: https://t.co/MFSR4N4G6s

[DecayPotato @DecayPotato]

@nameisAm_ @CIMB_Assists @asrulmm If no satisfy and valid answer, is better to withdraw all the money and close the account. Why use a bank service when they cant secure your money?

[DecayPotato @DecayPotato]

Dedicated to those people who enjoy their full day of work even at home https://t.co/5KftMxMIxV via @YouTube

[DecayPotato @DecayPotato]

Part of life is to encourage other to improve, not by brainwashing people thinking to follow your thinking. Telling out your problems let other to understand what are you facing. #workhard #playhard #

[\_(ʘ_ʘ)_/ @pollo290987]

#Emotet 18/12/2018
366 URL's
6 Doc
1 Payload
67 C2

[+] 29 New C2

IOC's
https://t.co/SbSEbJD9Dt

@DecayPotato @Jan0fficial @_ddoxer @luc4m @executemalware @James_inthe_box @bauldini @JRoosen @neonprimetime @JayTHL
@NelsonSecurity @HazMalware @Cryptolaemus1

[Lesley Carhart @hacks4pancakes]

Every time I read a year end report that states that a company “blocked 780,000 cyberattacks”, I cringe. It’s a clear sign the org is measuring productivity (and probably budget) based on stuff like SSH brute force attempts and heuristic antivirus detections.

[\_(ʘ_ʘ)_/ @pollo290987]

#Emotet 03/12/2018
346 URL's
19 DOC
7 Payload
119 C2

[+] 43 New C2

IOC's
https://t.co/MIwnnjsnuF

@DecayPotato @Jan0fficial @_ddoxer @luc4m @executemalware @James_inthe_box @bauldini @JRoosen @neonprimetime @Techhelplistcom @NelsonSecurity @HazMalware @Cryptolaemus1

[Cryptolaemus @Cryptolaemus1]

URLhaus #emotet Epoch 2 IOC update
https://t.co/OTItseXj1z

[Cryptolaemus @Cryptolaemus1]

Today's #emotet IoC/Notes for 11/30/18 - Another pile of doc download links and the latest info out there on Emotet. 73 E1 Doc DL URLs, 166 E2 Doc DL URLs, all payloads, hashes for docs and bins as well as latest C2s. Final Update.
https://t.co/h11s2AyPLs
https://t.co/NKpYZwSZPI

[Cryptolaemus @Cryptolaemus1]

Today's #emotet IoC's/Notes for 11/29/18 - Barely got this done. Hope it helps someone on a FRI. 115 E1 URLs/ 75 E2 URLs. Mixed templates blue/wh and orange/wh today. All C2s/Payloads/Hashes I could find. Till tomorrow. Final Update
https://t.co/z9FRZuATzM
https://t.co/T4n8GrWEXt

[Cryptolaemus @Cryptolaemus1]

Today's #emotet IoC's/Notes for 11/28/18 - GER speakers targeted by both epochs this morning as E1 had a run of attachment German named files.
64 E1 URLs/133 E2 URLs - latest payloads quintets/hashes and C2s. Final Update.
https://t.co/DS7ZFPk9Sm
https://t.co/PeuQeHmylG

[DecayPotato @DecayPotato]

Fresh doc?
Doc:b2aacb2c82b294049bf2c543b64badad265a88a7c0740c9e6e3ccb37cc1f99ad
Payload
mahimamedia[.]com/iYwNcae
lunasmydog[.]com/Tl
kylerowlandmusic[.]com/8aP
lawsonmusicco[.]com/NJ3Ta
rodtimberproducts[.]co[.]za/s
#emotet
https://t.co/zNmW4XaQn2

[\_(ʘ_ʘ)_/ @pollo290987]

#Emotet 28/11/2018
417 URL's
21 DOC
4 Payload
73 C2

[+] 12 New C2

IOC's
https://t.co/RvSHz6W1Qn

@DecayPotato @Jan0fficial @_ddoxer @luc4m @executemalware @James_inthe_box @bauldini @JRoosen @neonprimetime @Techhelplistcom @NelsonSecurity @HazMalware @Cryptolaemus1

[\_(ʘ_ʘ)_/ @pollo290987]

#Emotet 26/11/2018
499 URL's
30 Doc
6 Payload
126 C2

[+] 41 New C2

IOC's
https://t.co/6qwEXk5iGl

@DecayPotato @Jan0fficial @_ddoxer @luc4m @executemalware @James_inthe_box @bauldini @JRoosen @neonprimetime @Techhelplistcom @NelsonSecurity @HazMalware @Cryptolaemus1