2B

Eat hex for breakfast, binaries for lunch, crunchy malware for dinner, watch disassembly before sleep ... wannabe.

[2B @h3x2b]

@cyb3rops Cool, Professional. I am missing just the buzzwords about state sponsored adversary with advanced techniques.

[Markéta Vyvlečková @VyvleckovaM]

Po včerejší debatě kandidátů na prezidenta, hlavně AB, mám asi tyto pocity 😉

[Petr Pavel @prezidentpavel]

Volby vyhrávají hlasy, ne průzkumy. Prosím, přijďte v pátek a v sobotu volit, odhodlání Babiše prolhat se na Hrad je silné, nesmíme ho podcenit. Děkuji.

[2B @h3x2b]

Nein, nein, nein, nein, nein, nein, nein, nein !!!
12:01 in Kuala Lumpur is not 20:01 in London.
Not even in a winter.

[2B @h3x2b]

This #Mikrotik coin mining botnet still up and kicking - https://t.co/UfITAzWJ2c, https://t.co/69D7iRx8xh, https://t.co/SM2YKfVNrO

[2B @h3x2b]

Seems there is some botnet focusing on the Mikrotik devices. It installs scheduled job named "U6" polling C2 server for commands. And C2 servers are protected by @CloudFlare . More info on https://t.co/nHTe82KZu3

[2B @h3x2b]

@cyberwar Yep - still there:

[2B @h3x2b]

@solarwinds another #sunburst backdoored download still in @Akamai chache:
hxxps://downloads.solarwinds.com/solarwinds/CatalogResources/Core/2019.4/2019.4.5220.20569/SolarWinds-Core-v2019.4.5220-Hotfix5.msp
(md5 8f694c36670aa3ef0b55b5c7aa9edccb)

[2B @h3x2b]

Hello @solarwinds ... still one more #sunburst available now from hxxps://downloads.solarwinds.com/solarwinds/CatalogResources/Core/2020.2/2020.2.120.27273/CoreInstaller.msi Please can you remove it?

[2B @h3x2b]

@XD99683234 @solarwinds Yes, but still worth of doing cleanup and gather the corpses.

[2B @h3x2b]

another one in hxxps://downloads.solarwinds.com/solarwinds/CatalogResources/NCM/2020.2/2020.2.0.6088/NcmInstaller.msi (https://t.co/HVrTcsUDbQ)

[2B @h3x2b]

https://t.co/L6xTpvsvJa

[2B @h3x2b]

@CountIntel @benkow_ @solarwinds NcmInstaller.msi -> SolarWinds.Orion.Core.BusinessLayer.dll
https://t.co/VezwS3T4Fw

[2B @h3x2b]

@CountIntel @benkow_ @solarwinds Well the DLL is bundled in number of the release packages. New versions released, but probably not all of the vulnerable versions found in older releases.
Found another in the hxxps://downloads.solarwinds.com/solarwinds/CatalogResources/NCM/2020.2/2020.2.0.5959/NcmInstaller.msi

[2B @h3x2b]

@redteamwrangler videoconferencing the product "roadmaps"

[2B @h3x2b]

Countdown started :)

[KringleCon @KringleCon]

Our favorite time of year is almost here! KringleCon 3: French Hens coming soon. #HolidayHack

[2B @h3x2b]

@TalosSecurity Cool - thanks for fix :)

[2B @h3x2b]

It is official - Linux is malware ;) - according to Cisco @TalosSecurity https://t.co/UVm9BDwlDd

[2B @h3x2b]

I guess it would be some automation issue - there was some previous case flagging SANS ISC - https://t.co/pRyryD1atL

[abuse.ch @abuse_ch]

Introducing my newest project: I got phished

The goal is to notify IT-security representatives about phishing victims within their constituency 📨

👉 https://t.co/dl5x1jb3Cg

A big thanks to @JayTHL who initiated the project! 👏

For bug reports and feature requests -> DM me