Top Tweets for #VinCSS
VINCSS ON FRONTIER ENTERPRISE
In a recent interview with Frontier Enterprise magazine, Mr. Simon Trac Do, the CEO of VinCSS, discussed the challenges and opportunities of implementing FIDO standards in Vietnam and the Asia Pacific region.#VinCSS #Passwordless #FIDO2

We're 5 & Thriving: "Entering Series B, Going Global"
#VinCSS #5thAnniversary #Cybersecurity #Passwordless #EnteringSeriesBGoingGlobal

Recently, I have a talk at FIDO Alliance APAC Summit 2023 - about "#phishing attack failed on #passwordless"
Thank you so much to The Department of Information Security is an agency under the Ministry of Information and Communications, to #fido Alliance and to #VinCSS

I'm going to share about "Phishing attack failed on Passwordless" at the FIDO APAC SUMMIT 2023 event, organized by FIDO Alliance and VinCSS
#cybersecurity #vincss #fido2 #passwordless #phishing

⚔️This payload still uses the old decryption method with xor_key is "123456789". (2/2)
📄Connect to C2s:
185[.]239[.]226[.]5:108
185[.]239[.]226[.]5:111
185[.]239[.]226[.]5:438
185[.]239[.]226[.]5:236
#VinCSS #malwareanalysis
![kienbigmummy's tweet photo. ⚔️This payload still uses the old decryption method with xor_key is "123456789". (2/2)
📄Connect to C2s:
185[.]239[.]226[.]5:108
185[.]239[.]226[.]5:111
185[.]239[.]226[.]5:438
185[.]239[.]226[.]5:236
#VinCSS #malwareanalysis https://t.co/436Bj8F0uS](https://pbs.twimg.com/media/FWflTVOaMAErWG4.png)
At #VinCSS,I recently wrote an analysis related to the samples of the #MustangPanda(#PlugX) group.However,in all log.dll files uploaded from VN,there is one file that is not related to the this group's attack technique.
[Eng]https://t.co/4zwW3wiytg
[Vie]https://t.co/ec1YWv5lkg
![kienbigmummy's tweet photo. At #VinCSS,I recently wrote an analysis related to the samples of the #MustangPanda(#PlugX) group.However,in all log.dll files uploaded from VN,there is one file that is not related to the this group's attack technique.
[Eng]https://t.co/4zwW3wiytg
[Vie]https://t.co/ec1YWv5lkg https://t.co/fFFUadf5iZ](https://pbs.twimg.com/media/FUawNUcaUAACmxk.png)
#Follina #CVE-2022-30190
Submitted from Viet Nam. Someone try to create a POC?
#VinCSS #MalwareAnalysis

🔥Excited to share our latest analysis in which we detail our hunting and analyzing samples were uploaded from Vietnam related to the #MustangPanda(#PlugX)-a China-based APT group.
[En]: https://t.co/cYZeuqTftR
[Vi]: https://t.co/DLtjvuMVEy
#VinCSS #malwareanalysis #threathunting
![kienbigmummy's tweet photo. 🔥Excited to share our latest analysis in which we detail our hunting and analyzing samples were uploaded from Vietnam related to the #MustangPanda(#PlugX)-a China-based APT group.
[En]: https://t.co/cYZeuqTftR
[Vi]: https://t.co/DLtjvuMVEy
#VinCSS #malwareanalysis #threathunting https://t.co/5Hsn3H7OoU](https://pbs.twimg.com/media/FTLLh3XaUAAq2Dg.png)
🔥#Emotet👹Some minor changes that Ivan has made between recent versions of Emotet.
⚔️Use random exported function name, not DllRegisterServer.
⚔️Push the xor key to another param.
⚔️The ECC key decryption function does not include the size param.
Thanks @Myrtus0x0
#VinCSS

🔥#Emotet👹 When we show off...Ivan kept silent. When Ivan comeback, we cried 😭... I have to shift del my scripts..Now they're useless!!!!🤢
#VinCSS #MalwareAnalysis

🔥My Deep Dive into #Zloader - the Silent Night 👹
Including:
⚔️Unpack Zloader Core Dll
⚔️Decrypt strings used by Zloader
⚔️Apply #AppCall to recover the Windows API calls.
⚔️Process Injection technique
⚔️Decrypt configuration
https://t.co/DGoOZXGKhc
#VinCSS #malwareanalysis

🔥#Emotet 👹Ivan tries to update new TTP by using an LNK in zip file. If user launched the LNK file, it will drop a VBS file in %tmp% and then exec VBS file by using wscript.exe. (1/3)
#VinCSS #MalwareAnalysis

🔥#Emotet👹As warning from @Cryptolaemus1 , Emotet E4 has switched to 64-bit loaders. And.. 64b code 🤢 looks even more confusing than 32b code.All scripts written for the 32b ver are not usable...based on old scripts I rewrote for the 64b ver..🥱(1/5) #VinCSS #MalwareAnalysis
🚨#Emotet Update🚨 - Looks like Ivan laid an egg for easter and has been busy. As of about 14:00UTC today 2022/04/18 - Emotet on Epoch 4 has switched over to using 64-bit loaders and stealer modules. Previously everything was 32-bit except for occasional loader shenanigans. 1/x
🔥 #Qakbot malware has now changed its tactics, now using the .msi file to infect instead of using XLM macros as before.
👹Sample hash: c0beb47f629a5debe0e99790d16a4d04afe786d6fb42c5ab6dfcaed84d86e7ad
(1/3) #VinCSS #MalwareAnalysis

My colleague sharing his research about #IDA #microcode and how to write a simple plugin. #VinCSS
https://t.co/KdUpTPQykg

Our threat hunting team shared how they can read LSASS.exe memory from userland. Through a vulnerable driver, develop a shellcode to read any process memory in kernel context and make it available to user context #VinCSS
https://t.co/OdOq1DwsKm
My colleagues just published their analysis write-up and removal tool of a series of new malware variant of Panda group that has recently targeted to Vietnam VGCA. #VinCSS #MalwareAnalysis
[Eng]https://t.co/esT6LYJu8I
[Vie]https://t.co/vRj21zloTI
![kienbigmummy's tweet photo. My colleagues just published their analysis write-up and removal tool of a series of new malware variant of Panda group that has recently targeted to Vietnam VGCA. #VinCSS #MalwareAnalysis
[Eng]https://t.co/esT6LYJu8I
[Vie]https://t.co/vRj21zloTI https://t.co/vw5Kk5VmsA](https://pbs.twimg.com/media/E5WuXh2UcAYp3E4.png)
Last Seen Hashtags on Sotwe
nolimit momson filter:native_video
Seen from Jordan
ladyboy
Seen from Netherlands
Gleeks
Seen from Italy
pawg
Seen from United Kingdom
femboy
Seen from Indonesia
momson
Seen from Pakistan
momson()()*+filter:native_video
Seen from Jordan
TheChangeWeVotedFor
Seen from United States
monkeyapp
Seen from United Kingdom
nolimit()** filter:videos()****
Seen from United States
Most Popular Users

Elon Musk 
@elonmusk
241M followers

Barack Obama 
@barackobama
119.2M followers

Cristiano Ronaldo 
@cristiano
111.8M followers

Donald J. Trump 
@realdonaldtrump
111.8M followers

Narendra Modi 
@narendramodi
107M followers

Rihanna 
@rihanna
98M followers

NASA 
@nasa
92.2M followers

Justin Bieber 
@justinbieber
91.2M followers

KATY PERRY 
@katyperry
88.3M followers

Taylor Swift 
@taylorswift13
82.2M followers

Lady Gaga 
@ladygaga
73.7M followers

Virat Kohli 
@imvkohli
70.9M followers

Kim Kardashian 
@kimkardashian
70.1M followers

YouTube 
@youtube
68.7M followers

Bill Gates 
@billgates
64.2M followers

Neymar Jr 
@neymarjr
63.8M followers

The Ellen Show
@theellenshow
62.4M followers

CNN 
@cnn
61.8M followers

Selena Gomez 
@selenagomez
61.4M followers

X 
@x
60.8M followers





![kienbigmummy's tweet photo. ⚔️This payload still uses the old decryption method with xor_key is "123456789". (2/2)
📄Connect to C2s:
185[.]239[.]226[.]5:108
185[.]239[.]226[.]5:111
185[.]239[.]226[.]5:438
185[.]239[.]226[.]5:236
#VinCSS #malwareanalysis https://t.co/436Bj8F0uS](https://pbs.twimg.com/media/FWfjaTLaMAAgKQb.png)
![kienbigmummy's tweet photo. At #VinCSS,I recently wrote an analysis related to the samples of the #MustangPanda(#PlugX) group.However,in all log.dll files uploaded from VN,there is one file that is not related to the this group's attack technique.
[Eng]https://t.co/4zwW3wiytg
[Vie]https://t.co/ec1YWv5lkg https://t.co/fFFUadf5iZ](https://pbs.twimg.com/media/FUauxzBacAANPZU.png)
![kienbigmummy's tweet photo. At #VinCSS,I recently wrote an analysis related to the samples of the #MustangPanda(#PlugX) group.However,in all log.dll files uploaded from VN,there is one file that is not related to the this group's attack technique.
[Eng]https://t.co/4zwW3wiytg
[Vie]https://t.co/ec1YWv5lkg https://t.co/fFFUadf5iZ](https://pbs.twimg.com/media/FUauu3vagAATyY3.jpg)



![kienbigmummy's tweet photo. 🔥Excited to share our latest analysis in which we detail our hunting and analyzing samples were uploaded from Vietnam related to the #MustangPanda(#PlugX)-a China-based APT group.
[En]: https://t.co/cYZeuqTftR
[Vi]: https://t.co/DLtjvuMVEy
#VinCSS #malwareanalysis #threathunting https://t.co/5Hsn3H7OoU](https://pbs.twimg.com/media/FTLLg40acAEP_G3.png)
![kienbigmummy's tweet photo. 🔥Excited to share our latest analysis in which we detail our hunting and analyzing samples were uploaded from Vietnam related to the #MustangPanda(#PlugX)-a China-based APT group.
[En]: https://t.co/cYZeuqTftR
[Vi]: https://t.co/DLtjvuMVEy
#VinCSS #malwareanalysis #threathunting https://t.co/5Hsn3H7OoU](https://pbs.twimg.com/media/FTLLfV5agAAf9mR.png)
![kienbigmummy's tweet photo. 🔥Excited to share our latest analysis in which we detail our hunting and analyzing samples were uploaded from Vietnam related to the #MustangPanda(#PlugX)-a China-based APT group.
[En]: https://t.co/cYZeuqTftR
[Vi]: https://t.co/DLtjvuMVEy
#VinCSS #malwareanalysis #threathunting https://t.co/5Hsn3H7OoU](https://pbs.twimg.com/media/FTLLccsaIAASV35.jpg)









![kienbigmummy's tweet photo. My colleagues just published their analysis write-up and removal tool of a series of new malware variant of Panda group that has recently targeted to Vietnam VGCA. #VinCSS #MalwareAnalysis
[Eng]https://t.co/esT6LYJu8I
[Vie]https://t.co/vRj21zloTI https://t.co/vw5Kk5VmsA](https://pbs.twimg.com/media/E5WuUpXUcAEu79k.png)
![kienbigmummy's tweet photo. My colleagues just published their analysis write-up and removal tool of a series of new malware variant of Panda group that has recently targeted to Vietnam VGCA. #VinCSS #MalwareAnalysis
[Eng]https://t.co/esT6LYJu8I
[Vie]https://t.co/vRj21zloTI https://t.co/vw5Kk5VmsA](https://pbs.twimg.com/media/E5WuTCRUcAQqNUO.png)
![kienbigmummy's tweet photo. My colleagues just published their analysis write-up and removal tool of a series of new malware variant of Panda group that has recently targeted to Vietnam VGCA. #VinCSS #MalwareAnalysis
[Eng]https://t.co/esT6LYJu8I
[Vie]https://t.co/vRj21zloTI https://t.co/vw5Kk5VmsA](https://pbs.twimg.com/media/E5WuR7KVUAAYV2B.png)