Luca Nagy

Nerdy stuffs @Google. Reverse Engineering. Experimental, ambient, dub, acid.. whatever. Fixed gear. Zurich, Budapest.

[Luca Nagy @luca_nagy_]

Have been tracking and disrupting Glupteba since I joined Google and now we can share results about the operators, the services offered on top of the botnet (e.g.: proxy provider, cookie theft service), technical actions and the lawsuit against the criminals.

[Shane Huntley @ShaneHuntley]

Google has taken technical and legal action to disrupt the operations of Glupteba botnet targeting Windows computers. Approx 1M infected computers worldwide.

Great work by TAG, @luca_nagy_, @pmbureau and many other folks. (1/N)

https://t.co/0oV4Mg24Pv

[Luca Nagy @luca_nagy_]

my first release is out on bandcamp! https://t.co/yoYQBf7CGq

[Triton Poker @tritonpoker]

🇭🇺 Gergo Nagy has conquered Event #15 $50K PLO at 🔱 Triton Poker Series SHRS Jeju 2025, securing his first Triton title and a massive $1,360,000 payday.

A true PLO specialist, Nagy always joins the biggest four-card battles at Triton, and this time, he claimed the ultimate prize.

Congratulations, Gergo!

@wpt_global @GTOWizard @_Jacobandco #BetACR

[PokerNews @PokerNews]

🏆 | Beating the odds, Gergo Nagy turns a tiny stack into a massive win of €268,600 at EPT Barcelona!

Read More: https://t.co/UV7X0dnwGr🏆🃏

[Royal Hansen @royalhansen]

Proud of the work our legal and security teams are doing together to hold bad actors accountable and deter their efforts

[Shane Huntley @ShaneHuntley]

“Litigation was filed against several of CryptBot’s major distributors who we believe are based in Pakistan and operate a worldwide criminal enterprise.”

@pmbureau and the team taking on cybercrime on a number of fronts.

https://t.co/me0xTx1Jrd

[Shane Huntley @ShaneHuntley]

"Fog of War: How the Ukraine conflict Transformed the Cyber Threat Landscape"

TAG's biggest ever report. Along with @Mandiant and others from @Google we outline insights into changes in the cyber threat landscape triggered by the war.

https://t.co/INBnokgcPp 1/7

[Shane Huntley @ShaneHuntley]

More 0day in the wild, this time from North Korea targeting Internet Explorer from @_clem1 and @benoitsevens in TAG.

Yes IE exploits still work in 2022!

https://t.co/OuF3saG0qC

Targets seem to be N. Korean defectors and human rights activists and South Korean journalists.

[Shane Huntley @ShaneHuntley]

TAG continues our coverage of commercial spyware vendors with a blog post by @_clem1 & @benoitsevens on Variston's Heliconia exploitation framework.

https://t.co/2wfiFBsegl

[briankrebs @briankrebs]

The latest update in Google's legal efforts to go after the cybercrooks behind the Glupteba botnet is surreal. "Defendants [said] they could potentially help Google by taking the botnet offline." Glupteba facilitates ad fraud, spam, malware proxies, etc. https://t.co/bRXZWpwysQ

[briankrebs @briankrebs]

Google says it disrupted "Glupteba," a botnet of > 1M systems. Glupteba had clever defense, using Bitcoin blockchain to encode command-and-control (C2) servers, so that when 1 of its C2s got shut down it could scan the blockchain to find new C2 addresses. https://t.co/NMRyHSBRZk

[Osumi, Yusuke @ozuma5119]

After watching this blog and the video of @luca_nagy_ , I've overwhelmed by Google's amazing fight against botnets, both technical and legal fronts.

A ruling in our legal case against the Glupteba botnet
https://t.co/ZWw9Pxhjwn

[Shane Huntley @ShaneHuntley]

Google has been fighting against these Glupteba operators on technical and legal fronts with significant impact (78% reduction in infections one year later).

https://t.co/nqtDwXAEtF

[Urs Hölzle @uhoelzle]

Summary: if you're a botnet operator and get sued by Google, you should consider your options carefully before showing up in court.

@google https://t.co/Gz6uEhne8f

[Shane Huntley @ShaneHuntley]

Glupteba botnet operators slapped down in court. 👩‍⚖️

"the Defendants appeared in this Court not to proceed in good faith to defend against Google’s claims but with the intent to abuse the court system and discovery rules to reap a profit from Google”
https://t.co/w14oxZbkln

[Luca Nagy @luca_nagy_]

@threatresearch @jilles_com 😅😅😅

[Luca Nagy @luca_nagy_]

My @virusbtn talk "Uncovering a broad criminal ecosystem powered by one of the largest botnets, Glupteba" is up! You can find the paper and slides in the video description.

https://t.co/hcOo34LjuD

[Megan Carney @PwnieFan]

Really good intel on WizardUpdate from @luca_nagy_ and Lexi at #obts

[Vlad Stolyarov @vladhiewsha]

I often find it challenging to explain what is it that my team does at Google. There's now a 6-part docuseries called HACKING GOOGLE with EP001 is featuring the work we do at TAG or Threat Analysis Group.

https://t.co/ZLVCl9vw6C

[Shane Huntley @ShaneHuntley]

Episode just dropped. Excited that we can tell more of the story of TAG and proud of this team we've built to keep users safe and make attackers cry.

EP001: Threat Analysis Group | HACKING GOOGLE
https://t.co/TXShQFl1eq

@billyleonard @t_gidwani

[Luca Nagy @luca_nagy_]

Leaving Prague @virusbtn which was super fun again. #VB2022 Thanks for the organizers for having me!
Now, I am heading to Barcelona to #OBTS where I will co-present on #WizardUpdate. Can’t wait!