Top Tweets for #NotRobin
Magic pulp comix memories … #warrencomics #warrenmagazines
https://t.co/6VSbC9CbiX
i sometimes preferred the ads to the stories!
#notRobin #bizarreRobin
I’m interested on the second stage of the campaign #NOTROBIN #notrobin #NotRobin infection on #Citrix (CVE-2019-19781) #Shitrix once you have the backdoor listening… 🥴 @soolidsnakee @securitydoggo @FireEye any interesting trend? #Ransomware ?
Does anyone have a pcap showing the first POST request for #NOTROBIN activity? Some older pcaps for the exploit has been some url encoded decimal calling python for a shell, but just curious as to the what to look for beyond a successful or unsuccessful pull of the binary
@cglyer @FireEye @citrix @Mandiant @williballenthin @MadeleyJosh @_bromiley @jkoppen1 The access log scan logic was fun! 🤯
We settled on: zgrep -HEi
1️⃣ "(GET|POST)\s[^\s]*/(v|%76)(p|%70)(n|%6e)(s|%73)/[^\s]*\.xml\sHTTP/1\.1\"\s(200|304)" #exploit
2️⃣ "(GET|POST)\s[^\s]*/(v|%76)(p|%70)(n|%6e)(s|%73)/[^\s]*\.pl\sHTTP/1\.1\"\s304" #NOTROBIN
🔗 https://t.co/Ifid6RPImY
.@SOC_Prime created a post about #NotRobin #malware: the battle for NetScaler devices https://t.co/Hh3yUUYogc
@DigitalFawad @digitalcloudgal @alcgroup @imoyse @shanebrighton @avrohomg @DrJDrooghaag @sallyeaves @fklivestolearn @junjudapi @archonsec @fogle_shane @gvalan @JohnMaynardCPA @rmogha 👇🏼 shows how deep shit we are in, In #CyberSecurity
“It is unclear if the #NotRobin attacker is a good guy or a bad guy, as there was no additional malware deployed on the compromised @Citrix systems beyond the NotRobin payload.”
Hacker schoont aangevallen Citrix-servers op https://t.co/pXCIcaILxU #Citrix #cybercrime #hackers, #NOTROBIN
Took a look at some of the #freebsd #palware from the #NOTROBIN activity using the sample:
https://t.co/J8n2o325W1
Had a really positive experience using redress(see https://t.co/IZR3E4Bq6E) from @joakimkennedy.
1/2
@x1sec @MadeleyJosh @williballenthin @dinahosting @Vultr If that approach doesn’t work to stop the compromised running website from distributing #NOTROBIN malware, obviously the only next logical move is to sign up to run a race with them. #DFIRfit
Exploit & infrastructure "squatters rights" 🤔:
‣ 1⃣: read @williballenthin & @MadeleyJosh's blog on vigilante Citrix exploitation + #NOTROBIN: https://t.co/TOAqhjoGUJ
‣ 2⃣: consider hypothetical compromise of their compromised Wordpress to disrupt active payload distribution
I wonder how many admins used a POC exploit on their #NOTROBIN mitigated Citrix systems and determined they were not vulnerable?
https://t.co/NqlMo5vezm
Aww yeah...follow up post on CVE-2019-19781 from @williballenthin and @MadeleyJosh on #NOTROBIN malware. Awesome research and quick turnaround into a funky piece of malware.
https://t.co/73qCY3y7Qz
@PeteSpideyTalk @Kamala66364360 @LetsVenom @PlasticManTalk @LetSpidey @TalkingPitches @CruisinwithCruz @LetIronman @Letstalkkyle @comicscomix @LetsTodd #notrobin
Last Seen Hashtags on Sotwe
residue_management
momson nolimit()
Seen from Turkey
sexofamiliar
Seen from Turkey
곰돌이티셔츠
Seen from United States
妊婦フェチ
Seen from Japan
zootwt
Seen from United States
momson filter:videos
Seen from Germany
Omegle
Seen from Italy
NURTK
Seen from United States
k9girl() +filter:native_video
Seen from Poland
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
240.8M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.7M followers
Cristiano Ronaldo
@cristiano
111.1M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
97.8M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91M followers
KATY PERRY
@katyperry
87.9M followers
Taylor Swift
@taylorswift13
81.8M followers
Lady Gaga
@ladygaga
73.3M followers
Virat Kohli
@imvkohli
70.3M followers
Kim Kardashian
@kimkardashian
69.9M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64M followers
Neymar Jr
@neymarjr
63.1M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.9M followers
Selena Gomez
@selenagomez
61M followers
X
@x
60.8M followers