Thomas

doing some defensive stuff on my paid job

[Thomas @frasch_thomas]

@vxunderground A, B or C. Love them all. Size M pls. ^^

[Thomas @frasch_thomas]

@nikgeneburn @tarkov Give !!!

[Thomas @frasch_thomas]

@ArenaBreakoutPC @theillmeister

[Arena Breakout Infinite @ArenaBreakoutPC]

To celebrate, we are giving away 100 beta keys to our beloved players.
Here's how to catch one:
1️⃣Like
2⃣Follow us
3⃣Retweet and tag a friend

Event Ends
MAY 16

Thank you everyone for your support and feedback along the way.🖤
#ArenaBreakoutInfinite

[vx-underground @vxunderground]

Lockbit ransomware groups website has been seized by EUROPOL.

[Thomas @frasch_thomas]

#Cyberdefense

[Thomas @frasch_thomas]

@RansomwareNews yeeeah

[Thomas @frasch_thomas]

@tarkov best fix ^^ kill from friend from the west were resetted. gonna go again

[Thomas @frasch_thomas]

@techspence Yoooooo you’re totally right! We blue guys don’t want to expose our tactics either 👍

[Thomas @frasch_thomas]

@cyb3rops You need to be authenticated and privileges as of some public resources.

[Thomas @frasch_thomas]

@vxunderground Is this the late Santa gift?

[Thomas @frasch_thomas]

@vxunderground @MalDevAcademy @mrd0x You’re doing great work! ❤️

[Guy Leech @guyrleech]

At least @microsoft are being honest about the resource usage of the new @microsoftteams - "uses all system resources" 🤣

[vx-underground @vxunderground]

Lockbit ransomware group administrative staff claim ICBC has already paid the ransom demand.

[Thomas @frasch_thomas]

That’s why you don’t use Linux 😂😂

[Thomas @frasch_thomas]

Yooo that was personal

[MalwareHunterTeam @malwrhunterteam]

So, according to BlackCat ransomware gang, over a week ago, a woman in high position of Advarra's HR told them to "go fuk yourself".
Now, in their latest update, they leaked some nudes supposedly extracted from a chat between the same woman & the CEO of Advarra.
🤯
Crazy stuff...

[Thomas @frasch_thomas]

This "hXXps://empresape.com/eldi/?17195141" started everything... :D

[Thomas @frasch_thomas]

Finding "RUnDLl32 \AppData\Local\Temp\d13.dlld" is a red flag. Especially when curl got used to get that dll from "hXXp://49.13.119.72/jHuAT/Pelti/d13.dlld"
FCK U pikabot #cybersecurity

[ATT&CK @MITREattack]

The countdown begins! Join us in 18 minutes at 9AM ET as we kick-off two full days of #ATTACKcon4
https://t.co/cyFJCpZsV8

[Fox-IT @foxit]

🚨IMPORTANT🚨 We have observed that the implant placed on tens of thousands of Cisco devices has been altered to check for an Authorization HTTP header value before responding [1/3]