Top Tweets for #MALdocs
(PT_BR)
O treinamento de MALICIOUS DOCUMENT ANALYSIS está com a próxima turma CONFIRMADA para início em 06/ABRIL/2025.
Informações adicionais podem ser obtidas no website da Blackstorm Security.
#dfir #incidentresponse #malware #cybersecurity #threathunting #blueteam #maldocs
(PT_BR)
O treinamento de MALICIOUS DOCUMENT ANALYSIS está CONFIRMADA para início em 22/JUNHO/2024.
Informações adicionais podem ser obtidas no website da Blackstorm Security e também enviando uma mensagem para o endereço de email marcado no banner.
#maldocs
5/ Obtaining Macros With Microsoft Word
Microsoft word (on a safe VM) will also allow you to inspect #maldocs.
You can do this by opening up a suspicious document, and browsing to View -> Macros -> View Macros -> Edit.
![embee_research's tweet photo. Three Simple Methods For Analysing Malicious Documents
A quick overview of olevba, Microsoft Word, and Procmon for analysing malware documents and extracting embedded macro content.
[1/10] 🧵
#malware #maldocs https://t.co/9bxQQfgw0g](https://pbs.twimg.com/media/GOqRK09aYAEBNBd.png)
![embee_research's tweet photo. Three Simple Methods For Analysing Malicious Documents
A quick overview of olevba, Microsoft Word, and Procmon for analysing malware documents and extracting embedded macro content.
[1/10] 🧵
#malware #maldocs https://t.co/9bxQQfgw0g](https://pbs.twimg.com/media/GOqRIzCbAAExwYu.jpg)
![embee_research's tweet photo. Three Simple Methods For Analysing Malicious Documents
A quick overview of olevba, Microsoft Word, and Procmon for analysing malware documents and extracting embedded macro content.
[1/10] 🧵
#malware #maldocs https://t.co/9bxQQfgw0g](https://pbs.twimg.com/media/GOqRG_haIAA2oiB.jpg)
![embee_research's tweet photo. Three Simple Methods For Analysing Malicious Documents
A quick overview of olevba, Microsoft Word, and Procmon for analysing malware documents and extracting embedded macro content.
[1/10] 🧵
#malware #maldocs https://t.co/9bxQQfgw0g](https://pbs.twimg.com/media/GOqRFm1aUAAOz1R.png)
Judge Cannon works for tRump and is working to earn that promised seat on the Supreme Court.
#ThreatProtection #Maldocs exploiting old #vulnerabilities are still used to deliver malicious payloads. Read more: https://t.co/BZTgtEVu3k
2/2 And while #maldocs aren't as popular, these are good primers on the subject and also help to see/create an analysis workflow 👇
Getting Started w/ Malicous Office docs:
https://t.co/bQkBR4O470
Getting Started w/ Malicious Excel docs:
https://t.co/p2fFzV1Qrw
So, they were trying to abbreviate on @MSNBC chyron when discussing the Mar-A-Lago classified documents case & just shortened it to “Mal Docs” - which is perfect, imho, for a hashtag for 37 of the 91 felony counts against the former guy.
#MalDocs
Whadya say?
PS #TrumpIsGuilty
@svdate Uh, @kaitlancollins the ball is squarely in your court. Ask these questions. It’s not like the entirety of your career’s credibility rests on what happens Monday or anything.
#TrumpCommittedSedition
#HoldHisFeetToTheFire #Sexism #Racism #Corruption #MALdocs
New Blog Article: Not Just #OneNote, Also Microsoft Publisher #Maldocs can Deliver #Malware | Execution flow is document[.]pub (MSPUB.EXE) -> cmd.exe -> mshta.exe ➨ https://t.co/uCxyglXLXN #Cybersecurity #Cyberdefense #InfoSec #OSINT
Black Basta: Riding the Crimeware Sleigh:
https://t.co/EUjEP6XQSc
#malware #qakbot #qbot #cybersecurity #threatintelligence #threatintelligence #threatinformation #cybercrime #blueteam #maldocs
waking up at 6 am — totally worth it to watch this webinar with @DidierStevens and take all the notes!
#maldocs #malwareanalysis
A PDF document containing a DOCX file, that downloads a RTF, that executes shellcode will be the star of @DidierStevens upcoming brownbag #webinar.
He’ll use this single "turducken" document to demonstrate 4 different analysis techniques.
Register here: https://t.co/fgxfaQdqQn
Not sure what these bad actors fancy about Jon McGlone, but waves of #maldocs obfuscate stage-two with his website.
Read through the attack-chain within this new blog:
RTF files, Shellcode and More Shenanigans
https://t.co/lPsADyLBeh
#ThreatIntel
#malware
A few days ago we discovered an interesting document spoofing contract for the supply of services to an energy company from southern Iran.
Since this family of #maldocs was not previously known, we call it Green Stone.
https://t.co/R16NumItAD
#ThreatHunting #ThreatIntel
Researchers can set alerts in Virustotal to flag when a file of interest gets submitted. I get periodic bursts of these -40444 #maldocs, but there was something notable about the document titles in this batch last week: They all parrot specific Russian disinformation topics. 2/16
Heavily obfuscated macros within these German language #maldocs loading up private powershell scripts
https://t.co/4hd0NuULf0
#ransomware
Last Seen Hashtags on Sotwe
lidERAtrial
Seen from United States
candid
minichat()()()()()()
Seen from Norway
horsebraids
Seen from United States
男喘
Seen from Malaysia
anxiouspanda(***)***+filter:native_video
Seen from Belgium
healingvoicewithin
Seen from Italy
ebony #young #pyt school
Seen from United States
PlayoffSZN
Seen from United States
mrsi
Seen from Malaysia
Most Popular Users
Elon Musk 
@elonmusk
241.7M followers
Barack Obama
@barackobama
118.9M followers
Cristiano Ronaldo
@cristiano
114.6M followers
Donald J. Trump
@realdonaldtrump
111.9M followers
Narendra Modi
@narendramodi
107.2M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.4M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90.1M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.5M followers
Kim Kardashian
@kimkardashian
70.9M followers
YouTube
@youtube
68.8M followers
Neymar Jr
@neymarjr
66.5M followers
Bill Gates
@billgates
65.2M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.3M followers
CNN
@cnn
61.8M followers
X
@x
60.7M followers