Top Tweets for #dadsec
Trustwave uncovers Dadsec and Tycoon2FA, new PhaaS kits bypassing MFA to target Microsoft 365 users with advanced AiTM tactics.
#Tycoon2FA #Dadsec #Storm1575 #PhaaS #AiTM #MFABypass #PhishingKit #CredentialTheft #CloudflareTurnstile #EmailSecurity
https://t.co/U4a5u3MhLq
Another #Dadsec / Storm-1575 campaign using a SharePoint-themed phishing page.
sharepoint-pdf[.]com - 35.204.150[.]5
See the attached images for the usual redirect domains ending in ".ru," behind CloudFlare, using LiteSpeed servers.
![nahamike01's tweet photo. Another #Dadsec / Storm-1575 campaign using a SharePoint-themed phishing page.
sharepoint-pdf[.]com - 35.204.150[.]5
See the attached images for the usual redirect domains ending in ".ru," behind CloudFlare, using LiteSpeed servers. https://t.co/8CieizGWsS](https://pbs.twimg.com/media/GAQ2VSJaIAA3ja8.jpg)
A nice concise writeup adding observations relating to reported #Dadsec activity - in this case analysis of an Adobe #openredirect used to phish uses with the Dadsec platform.
Was great to support @RacWatchin8872 in their cyber security journey! Keep up the good work.
An increasing number of QR code #phishing campaigns associated with #PhaaS, such as #Dadsec OTT, #Tycoon and #W3LLPanel, targeted financial organisations in 2023.

🌪️Thanks for the email, Storm-1575 - not this time 🙂
🔗URL #Dadsec Panel: abqmvo6wyp09h8n.afbnrrxrjg[.ru/kbw3v/p/
🕵️♂️🔐Big shoutout to @josh_penny (@BridewellCTI) for the insightful report, which allowed me to learn more about this attack.

Joshua Penny, our Senior Threat Intelligence Analyst has analysed a widespread credential harvesting campaign. The threat actors are utilising the Dadsec platform to conduct widespread phishing of global organisations to steal Microsoft 365 credentials.
The threat actors are using Cyber Panel, an open-source web development panel, hundreds of Domain Generated Algorithm (DGA) domains that are created daily to host credential harvesting pages.
For more information, including Indicators of Compromise (IoCs) and associated infrastructure, see our full report 👉 https://t.co/LGzJJUmGDg
@AnyRun_App
#BridewellCTI #ThreatIntelligence

@sandal_CEO Do you remember the first time we heard your voice 🤔
What did we talk about?
@weber_grillz #dadsec
@obstructqble @0xPresley @pinkfloyd @rogerwaters @parxrap @Merrysfriend @MerryAnarchy #dadsec ask @guccifer1337
@MissyGH @vandman777 @Christie_Malry @creeptwin @Why_All_the_BS @Andronious @pantfarder69 @fireofthylove @beallyoucanbop @kyleleehufnagel @lordofvicevk @RageofBaltimore @HardingJerk @naibotoobob @BobooTobian @Frociality @AnAngryOpossum @cortmanteau @Tolerance_haver @makeitsnowondem @Decepticon604 @a_beet_wagon @ColdWarTsarina @GarbageGangHQ @TheClickPit @FendersonGote @SchutzHateWomen @FazolisStore69 @awhite_hispanic @satanic_redneck @Tom_Girtin @jklibertarian @MDingwick @ANTIFA_lawyer @dad_plaid @RealDylanKnight @ChrisTweetsLLC @rihclit @TacoBones @dorkcop @RavioliLawyer @SeeLukeTri @white19888 @heyandrebu @WorthyWomen1 @calamityqanon @Evilgenius29 @ShutUpJakob @pennyplotkin #DadSec
Not naming Twofish's key expansion function "Fiveloaves" seems like a missed opportunity of Biblical proportions. #dadsec
As a 4th-time dad, a most pressing question resurfaces: Is a newborn's sequence of sigh-coo-grunt noises indistinguishable from a random permutation? Could gas-induced noise be used to build an SPRP? Is this the new Lavarand? Huggies, Pampers, you up? #dadsec #itsjustgas
Some personal news: Tristan Marques Troutman was born today, our first son of now four awesome kids. I also might or might not have recorded myself wearing a blue hospital gown and mask while saying "Sub-Zero wins" to myself in the mirror. #dadsec #fatherhood #babality
Last Seen Hashtags on Sotwe
Most Popular Users

Elon Musk 
@elonmusk
240.8M followers

Barack Obama 
@barackobama
118.7M followers

Cristiano Ronaldo 
@cristiano
114.5M followers

Donald J. Trump 
@realdonaldtrump
111.9M followers

Narendra Modi 
@narendramodi
107M followers

Rihanna 
@rihanna
98.7M followers

NASA 
@nasa
92.2M followers

Justin Bieber 
@justinbieber
91.8M followers

KATY PERRY 
@katyperry
90M followers

Taylor Swift 
@taylorswift13
84M followers

Lady Gaga 
@ladygaga
75.5M followers

Virat Kohli 
@imvkohli
73.4M followers

Kim Kardashian 
@kimkardashian
70.8M followers

YouTube 
@youtube
68.7M followers

Neymar Jr 
@neymarjr
66.4M followers

Bill Gates 
@billgates
65.2M followers

Selena Gomez 
@selenagomez
63.1M followers

The Ellen Show
@theellenshow
62.2M followers

CNN 
@cnn
61.7M followers

X 
@x
60.6M followers


![nahamike01's tweet photo. Another #Dadsec / Storm-1575 campaign using a SharePoint-themed phishing page.
sharepoint-pdf[.]com - 35.204.150[.]5
See the attached images for the usual redirect domains ending in ".ru," behind CloudFlare, using LiteSpeed servers. https://t.co/8CieizGWsS](https://pbs.twimg.com/media/GAQ2UgNb0AAJVtV.jpg)
![nahamike01's tweet photo. Another #Dadsec / Storm-1575 campaign using a SharePoint-themed phishing page.
sharepoint-pdf[.]com - 35.204.150[.]5
See the attached images for the usual redirect domains ending in ".ru," behind CloudFlare, using LiteSpeed servers. https://t.co/8CieizGWsS](https://pbs.twimg.com/media/GAQ2TxZaoAAuOxx.jpg)
![nahamike01's tweet photo. Another #Dadsec / Storm-1575 campaign using a SharePoint-themed phishing page.
sharepoint-pdf[.]com - 35.204.150[.]5
See the attached images for the usual redirect domains ending in ".ru," behind CloudFlare, using LiteSpeed servers. https://t.co/8CieizGWsS](https://pbs.twimg.com/media/GAQ2RdFbkAAQHb5.jpg)















