#CozyDuke - Twitter Hashtag

over 2 years ago

Like any decent APT service, iSOON all researches the field, such as gathering CTI on APTs such as #CozyDuke (aka #MidnightBlizzard, #APT29, #CozyBear)

BushidoToken's tweet photo. Like any decent APT service, iSOON all researches the field, such as gathering CTI on APTs such as #CozyDuke (aka #MidnightBlizzard, #APT29, #CozyBear) https://t.co/0vR7MZ1w0s

1

8

1

3

0

D33P_DIV3R @D33P_DIV3R

almost 4 years ago

@h2jazi d1129a1f604037f2bd6c9539ec3cb728 Triggers Yara rule IMPLANT_8_v2_Hammertoss found in this analysis report https://t.co/wLfxelfYEt #apt29 #cozybear #cozyduke #hammertoss

1

0

Michael Gould, CPA, CITP, CGMA @MichaelGouldCRI

almost 4 years ago

Researchers from @Mandiant reported that #Russia-linked APT group #CozyBear continues to target Microsoft 365 accounts in #NATO countries for cyberespionage purposes. #CyberSecurity #Infosec #APT29 #CozyDuke #Nobelium https://t.co/j8T4R9H7Dy

1

2

0

Tommy M (TheAnalyst) @ffforward

almost 6 years ago

Samples detected as #CobaltStrike and/or #CozyDuke on VT communicating with 8.209.124.215 @alibaba_cloud, same IP used for #zloader #sovietZloader downloads. https://t.co/KJW5shwWgu sovietZloader collection: https://t.co/qKioZOrlkk cc @James_inthe_box @JAMESWT_MHT @VK_Intel

ffforward's tweet photo. Samples detected as #CobaltStrike and/or #CozyDuke on VT communicating with 8.209.124.215 @alibaba_cloud, same IP used for #zloader #sovietZloader downloads. https://t.co/KJW5shwWgu
sovietZloader collection: https://t.co/qKioZOrlkk
cc @James_inthe_box @JAMESWT_MHT @VK_Intel https://t.co/LfHfRS6LBj

1

9

2

0

Rob Cataldo @RobbyCataldo

almost 6 years ago

In a virtual panel dedicated to the upcoming virtual Black Hat event, @k_sec discussed intriguing cyberespionage campaigns, evolution of #Sofacy and what #CozyDuke has been up to. https://t.co/TCLdiZCbxa

0

2

0

Kevin Perlow @KevinPerlow

about 6 years ago

Looking back at LiteDuke (#APT29/#CozyDuke): https://t.co/bvF7ZZlkVd Found a copy and wanted to do some RE to build on @ESETresearch's previous great work. Post includes deeper dive into the available commands and some of the techniques used.

KevinPerlow's tweet photo. Looking back at LiteDuke (#APT29/#CozyDuke):

https://t.co/bvF7ZZlkVd

Found a copy and wanted to do some RE to build on @ESETresearch's previous great work. Post includes deeper dive into the available commands and some of the techniques used. https://t.co/M9YJosr5ps

1

43

17

7

0

Kaspersky @kaspersky

over 7 years ago

#APT29, the group best known for hacking the #DNC ahead of the 2016 presidential election re-emerges after 2 years. https://t.co/ZwnQuTAn8P #APT29 also go by #CozyBear, #CozyDuke, #theDukes or #PowerDukes

kaspersky's tweet photo. #APT29, the group best known for hacking the #DNC ahead of the 2016 presidential election re-emerges after 2 years. https://t.co/ZwnQuTAn8P

#APT29 also go by #CozyBear, #CozyDuke, #theDukes or #PowerDukes https://t.co/Ng99v6IUwE

1

7

2

0

Costin Raiu

@craiu

over 7 years ago

Wondering what 2019 has in store when it comes to APT attacks? Join me and @trompi tomorrow at 3pm CET and find out: https://t.co/sLSpndVwBx #hades #fruityarmor #vpnfilter #olympicdestroyer #cozyduke #turla #apt10 #iwanttobelieve #notpredictions

1

35

27

2

0

AntiVirusLV @AntiVirusLV

over 8 years ago

@trbrtc @normundsbergs @Nieuwsuur @volkskrant The first public analysis and naming of #CozyDuke / #CozyBear was in April 2015 in this Securelist article: https://t.co/kbgVaE671b