Top Tweets for #notRobin
Magic pulp comix memories … #warrencomics #warrenmagazines
https://t.co/6VSbC9CbiX
i sometimes preferred the ads to the stories!
#notRobin #bizarreRobin
I’m interested on the second stage of the campaign #NOTROBIN #notrobin #NotRobin infection on #Citrix (CVE-2019-19781) #Shitrix once you have the backdoor listening… 🥴 @soolidsnakee @securitydoggo @FireEye any interesting trend? #Ransomware ?
Does anyone have a pcap showing the first POST request for #NOTROBIN activity? Some older pcaps for the exploit has been some url encoded decimal calling python for a shell, but just curious as to the what to look for beyond a successful or unsuccessful pull of the binary
@cglyer @FireEye @citrix @Mandiant @williballenthin @MadeleyJosh @_bromiley @jkoppen1 The access log scan logic was fun! 🤯
We settled on: zgrep -HEi
1️⃣ "(GET|POST)\s[^\s]*/(v|%76)(p|%70)(n|%6e)(s|%73)/[^\s]*\.xml\sHTTP/1\.1\"\s(200|304)" #exploit
2️⃣ "(GET|POST)\s[^\s]*/(v|%76)(p|%70)(n|%6e)(s|%73)/[^\s]*\.pl\sHTTP/1\.1\"\s304" #NOTROBIN
🔗 https://t.co/Ifid6RPImY
.@SOC_Prime created a post about #NotRobin #malware: the battle for NetScaler devices https://t.co/Hh3yUUYogc
@DigitalFawad @digitalcloudgal @alcgroup @imoyse @shanebrighton @avrohomg @DrJDrooghaag @sallyeaves @fklivestolearn @junjudapi @archonsec @fogle_shane @gvalan @JohnMaynardCPA @rmogha 👇🏼 shows how deep shit we are in, In #CyberSecurity
“It is unclear if the #NotRobin attacker is a good guy or a bad guy, as there was no additional malware deployed on the compromised @Citrix systems beyond the NotRobin payload.”
Hacker schoont aangevallen Citrix-servers op https://t.co/pXCIcaILxU #Citrix #cybercrime #hackers, #NOTROBIN
Took a look at some of the #freebsd #palware from the #NOTROBIN activity using the sample:
https://t.co/J8n2o325W1
Had a really positive experience using redress(see https://t.co/IZR3E4Bq6E) from @joakimkennedy.
1/2
@x1sec @MadeleyJosh @williballenthin @dinahosting @Vultr If that approach doesn’t work to stop the compromised running website from distributing #NOTROBIN malware, obviously the only next logical move is to sign up to run a race with them. #DFIRfit
Exploit & infrastructure "squatters rights" 🤔:
‣ 1⃣: read @williballenthin & @MadeleyJosh's blog on vigilante Citrix exploitation + #NOTROBIN: https://t.co/TOAqhjoGUJ
‣ 2⃣: consider hypothetical compromise of their compromised Wordpress to disrupt active payload distribution
I wonder how many admins used a POC exploit on their #NOTROBIN mitigated Citrix systems and determined they were not vulnerable?
https://t.co/NqlMo5vezm
Aww yeah...follow up post on CVE-2019-19781 from @williballenthin and @MadeleyJosh on #NOTROBIN malware. Awesome research and quick turnaround into a funky piece of malware.
https://t.co/73qCY3y7Qz
@PeteSpideyTalk @Kamala66364360 @LetsVenom @PlasticManTalk @LetSpidey @TalkingPitches @CruisinwithCruz @LetIronman @Letstalkkyle @comicscomix @LetsTodd #notrobin
Last Seen Hashtags on Sotwe
CoventryvsOxford
Seen from United States
kusadasipasif
Seen from Turkey
shinu
Seen from India
SilvereneTower
Seen from United States
redneck
Seen from Singapore
アネックス仙川ファクトリー
Seen from United States
騙せない
Seen from United States
FederacijaBIH
Seen from United States
momson()* +filter:native_video
Seen from Canada
Coblos6ERINDRA
Seen from United States
Most Popular Users
Elon Musk 
@elonmusk
240.8M followers
Barack Obama
@barackobama
119.2M followers
Donald J. Trump
@realdonaldtrump
111.7M followers
Cristiano Ronaldo
@cristiano
111.1M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
97.8M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91M followers
KATY PERRY
@katyperry
87.9M followers
Taylor Swift
@taylorswift13
81.8M followers
Lady Gaga
@ladygaga
73.3M followers
Virat Kohli
@imvkohli
70.3M followers
Kim Kardashian
@kimkardashian
69.9M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64M followers
Neymar Jr
@neymarjr
63.1M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.9M followers
Selena Gomez
@selenagomez
61M followers
X
@x
60.8M followers