Dex (horse)

Cinema & Photography, A/V Tech, Musician, Convention Organizer.
Certified Horse.
I break things and I make things.
Definitely not a giant space octopus.

[Dex (horse) @dexpone]

@AzakaSekai_ @1ZRR4H I believe it is ContagiousInterview. The first part is similar to the OtterCookie first stage described here: https://t.co/LqhVxnBmOk, payload is a newer version of BeaverTail.

[Dex (horse) @dexpone]

@AzakaSekai_ Cool talk! You had some very interesting insights :)

[Dex (horse) @dexpone]

@psifertex @github If you manage to fight your way through the recursive support and help pages and defeat an AI support agent clearly meant only to gatekeep you, you can open an actual support ticket that will be reviewed by their security team and in it list as many abuse instances as you want...

[Dex (horse) @dexpone]

@L0Psec @malwrhunterteam That matches one of the stealers used by DeceptiveDevelopment/ContagiousInterview. Likely NK-affiliated, but the context around it is definitely something new.

[Dex (horse) @dexpone]

@malwrhunterteam @patrickwardle This looks like another version of the fake password prompt used to steal user passwords in this DPRK-aligned campaign related to DeceptiveDevelopment/ContagiousInterview (here named ChromeUpdateAlert): https://t.co/SjtEdXcdq1
It even uses the same Dropbox API key.

[Dex (horse) @dexpone]

@malwrhunterteam I know I am but one of many who value your insights and ability to spot interesting samples. I thought you were just taking a break, we all need those. Nobody can be expected to tweet about malware non-stop.

[Dex (horse) @dexpone]

@malwrhunterteam @patrickwardle It is slightly modified compared to the github project, but the modifications don't seem malicious.

[Dex (horse) @dexpone]

@malwrhunterteam @ShadowChasing1 @h2jazi @1ZRR4H @cyb3rops This is from a couple months old campaign with trojanized packages on PyPI - described for example here: https://t.co/hLxnHrZJ69
Delivers the WebLogTea RAT

[Dex (horse) @dexpone]

@fang_cz @Silou_Atien @FlynnMLP @PonyConHolland Yes, it's mine. I'm surprised there's so much debate over a power cord with my name on it :D

[Dex (horse) @dexpone]

Oops, I broke the very notion of time. Thanks for telling me, Windows Performance Analyzer!

[Dex (horse) @dexpone]

@cakeswithfaces And now your book has officially been to Japan! Let me know if you want more pics of your guide visiting places :)

[Dex (horse) @dexpone]

@cakeswithfaces I promise I will! The restrictions are slowly loosening, hopefully it won't take long for you all to join me here :)

[Dex (horse) @dexpone]

I hope you'll guide me well, @cakeswithfaces!

[Dex (horse) @dexpone]

@souldestrings @wuchta7 I meant Czechoslovak of course. Didn't mean to exclude Slovakia from this.

[Dex (horse) @dexpone]

@souldestrings @wuchta7 It looks like a bunch of samples of early Czech electronic music. You can find the origins for some of them by googling, others are a mystery even for me.

[Dex (horse) @dexpone]

@prilis_uprimna Ohledně C(++) existuje tahle výborná prezentace. Doporučuji všem co si myslí, že umí C(++).
https://t.co/06a7CPULLc

[Dex (horse) @dexpone]

@souldestrings @Jamis_bro @Scraton_Music Luckily I'm only about to travel to the southeast today, hopefully no more extreme weather will come.

[Dex (horse) @dexpone]

@Poniczech A ještě navíc jsem si nevšiml že to tu už někdo napsal