GriYo

Tried, tested, not approved

[Costin Raiu @craiu]

If you're into reverse engineering, this will rock your world:

[GriYo @griyo666]

@OperadorNuclear Let's go!

[GriYo @griyo666]

Look who's eating at the table in front of me 🤭

[GriYo @griyo666]

@elmundotoday

[Pablo Rincon Crespo @PabloForThePPL]

Hoy en #RootedCon2022 hemos presentado los resultados de una investigación llevada a cabo en @Cylera_ sobre atribución técnica de #Kwampirs y #shamoon . Más info técnica aquí: https://t.co/WEMnKZ5Qte

[Dreg @therealdreg]

Beyond rubber ducky: evil mass storage POC with AT90USBKEY2. malware-tool for offline system. USB composite device with keyboard + mass storage + exfiltration via radio: https://t.co/S71X98LUqn

[Fumik0_ @fumik0_]

Well, I put my soul on that one. https://t.co/PZbZT5iAhT

[tmp.0ut @tmpout]

We are pleased to announce tmp.0ut Vol. 1
https://t.co/b8uMqeNjht

[Yarden Shafir @yarden_shafir]

Running out of EDR bypass techniques (that's funny, of course you're not)? Don't worry, Microsoft is here to help you with a new one:
https://t.co/OhCqlE3ieb

[GriYo @griyo666]

I would like to propose this design for some #Virustotal t-shirts

[Costin Raiu @craiu]

While looking at the #SolarWinds #Sunburst backdoor, we discovered several features that overlap with a previously identified backdoor known as Kazuar, used by Turla. Our analysis: https://t.co/3EF6Y2G5ly #unc2452 #darkhalo

[GriYo @griyo666]

Felicidades Mercè

[Mercè Molist @mercemolist]

Hace 25 años entré en el mundo de los hackers y me enamoré tanto que les dediqué articulos y incluso un libro. Hoy el libro está en las principales librerias. Ya he hecho todo lo que creía que tenía que hacer. Puedo iniciar otros caminos. https://t.co/jfS3shpSnE

[Costin Raiu @craiu]

Here's our new research on #MosaicRegressor - an in the wild, UEFI bootkit that installs a custom made malware framework: https://t.co/nAOsBAeNU6

[blueliv @blueliv]

#GuLoader is one of the most widely used loaders to distribute #malware throughout 2020. Learn about the techniques that the loader uses to thwart the analysts and their virtual machines/sandboxes: https://t.co/j4CGlU4wyy #ThreatHunting #ThreatIntel #sandbox #loader

[GriYo @griyo666]

@Mario_Vilas @fred_SSC ohh es cierto! https://t.co/tAKJO0TIZx

[vx-underground @vxunderground]

Friends,

I am very pleased to announce that I have managed to re-assemble the original 29a archives in totality.

https://t.co/PEwsR9dyN3

All zines are now present in what was once their original form.

1luv
-smelly__vx

[GriYo @griyo666]

@ASUS_ROG Your AURA software is the biggest piece of shit I've ever seen. Check out your own forums. So many people complaining that it doesn't work, doesn't it tell you anything? Who programs it? Monkeys?

[d00rt @D00RT_RM]

I just published an in-depth analysis of how the #Emotet network protocol works. Also I've released a tool which emulated this protocol and is capable to download new #modules & #malware from the C&Cs.

It's integrated with @hatching_io and @CapeSandbox.

https://t.co/2491AZvGXj

[Frank Boldewin @r3c0nst]

My analysis of a new #ATM #malware called #XFS_DIRECT using a Raspberry Pi Zero W and P4WNP1's HID backdoor for delivery. https://t.co/cTLv4uZ2JB #DFIR @Bank_Security #YARA rule is here --> https://t.co/bbmP2eFCco

[ESET Research @ESETresearch]

#ESETresearch discovered 3 new malware families part of the #Dukes/#APT29 arsenal: #PolyglotDuke, #RegDuke and #FatDuke
📌 Twitter, Reddit as C&C
📌 C&C communications in pictures
🎯 3 European MFAs + 1 embassy in Washington, DC
📅 2013 to June 2019
https://t.co/9t6atlRoGP 2/4