Gootloader

Security researcher dedicated to pissing off the Gootloader Threat Actor.

[Gootloader @Gootloader]

Guess who's back? 🎶
Gootloader's back. Again.

New evasion tricks. New persistence chain. Same legal-themed lures.
Big props to @RussianPanda9xx & @HuntressLabs for catching this one early.

Details: https://t.co/jLlG9WWSC7…

#gootloader #malware #JavaScript #powershell

[Gootloader @Gootloader]

@RussianPanda9xx Raccoon cage?

[Gootloader @Gootloader]

@lepotekil This account is used to disrupt the Gootloader TA’s activities. DMs are open if you want any assistance or have questions

[Gootloader @Gootloader]

@FrameworkPuter I’d take a free laptop, sell it and donate the money to charity

[Gootloader @Gootloader]

https://t.co/ffbX7keMXA

[MalBeacon @malbeacon]

🚨 Trojanized CPU-Z → STXRAT → PureLogs Stealer → PureHVNC → 54hrs of exfil through a hidden QEMU VM.

We caught everything after.

First documented full post-exploitation chain for this campaign. IOCs & hunting artifacts link in thread

#ThreatIntel #DFIR #Malware

[Gootloader @Gootloader]

@briankrebs https://t.co/VQuAh9oh0u

[Gootloader @Gootloader]

@RussianPanda9xx Hope you feel better

[Gootloader @Gootloader]

@RussianPanda9xx Safe travels!

[Gootloader @Gootloader]

@RussianPanda9xx @jenkohwong Could they have made the podium any bigger?

[Gootloader @Gootloader]

@RussianPanda9xx @BleepinComputer @skocherhan @SecurityAura Same. There is only one Aura

[Gootloader @Gootloader]

@struppigel https://t.co/bJeDXrKbxq

[GhostExodus @ExodusGhost]

Before I was arrested in 2009, I was at the height of my little cybercriminal "empire". I was standing at a crossroads. Part of me wanted an exit and a chance to redirect my skills toward something constructive. Another part of me feared that if I walked away, all the risks I had taken as a hacker would have meant nothing.

11 years in prison for hacking taught me that the reputation I thought I had built in that world, the ideals I believed in, and the status I thought mattered turned out to be far more futile than I could have imagined at the time. When everything collapsed, I realized that none of that mattered. I learned that most of what passes for loyalty and respect in cybercrime is conditional.

Today, there's no reason to turn to cybercrime in order to feel accepted or to enjoy camaraderie and acceptance among peers, or to pursue a sense of justice and vindication. Cybercrime isn't the solution, or the stepping stone.

All the hackers in my crew from back in the day have respectable cybersecurity careers today, because sooner or later everyone learns the same lesson. Cybercrime has limits, and it does not put food on the table without tremendous risk. #realtalk #hacking #hacktivism #truecrime

[Gootloader @Gootloader]

@RussianPanda9xx I have a worse story, next time we are in person

[Gootloader @Gootloader]

@RussianPanda9xx @sudo_Rem @HuntressLabs

[Gootloader @Gootloader]

@hellodotnyc are yall active on here? Got a bunch of domains to report to yall

[Gootloader @Gootloader]

@RussianPanda9xx At least it’s not a root canal

[Gootloader @Gootloader]

@evernote why do you make it impossible to report malicious posts to yall? It’s giving accomplice vibes

[Gootloader @Gootloader]

@FABO97662188 Thought it was protected by cloudflare