Lucas Nery

Open Source adept and TryHack enthusiast

Cybersecurity Analyst, Threat Intelligence & Blue Teamer @ PROOF.

[Lucas Nery @lucasbnery]

Notas rj:

Uber tirou o sapato (vans),
Coloração marrom e falou que era a colab mkkkkkkkkkk

[Lucas Nery @lucasbnery]

Some iocs referring to #CVE-2022-41328

IoCs:
47.252.20[.]90

File Hashes:
Auth - b6e92149efaf78e9ce7552297505b9d5
Klogd - 53a69adac914808eced2bf8155a7512d
Support - 9ce2459168cf4b5af494776a70e0feda

#Fortinet #fortigate #FortiOS #CVE-2022-41328

[Lucas Nery @lucasbnery]

@grossicaioc KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK

[Lucas Nery @lucasbnery]

@Jexdev so hard to find = (

[Jexdev @Jexdev]

CVE-2023-25610 POC? Anyone? Fortinet?

[Lucas Nery @lucasbnery]

@niraj1mahajan @_groww Hey, @niraj1mahajan can we talk in DM?

[Lucas Nery @lucasbnery]

Passível de investigação 🤨
Postado recentemente no #BreachForum provável database da #Oi

[Lucas Nery @lucasbnery]

@theluemmel Do you have the modus operandi of the attack?

[Lucas Nery @lucasbnery]

@D0rkerDevil @1ZRR4H + IoCs:

193.37.255.114-M247-LTD-Bratislava
89.248.167.131NET-2-167
185.142.236.35BlackHOST-CLOUD
185.142.236.36BlackHOST-CLOUD
185.142.236.34BlackHOST-CLOUD
195.144.21.56BlackHOST-CLOUD
71.6.167.142CARINET-5

[Lucas Nery @lucasbnery]

@theluemmel + IoCs:

104.152.52.55-RETHEM-HOSTING
43.130.10.173-ACEVILLEPTELTD-SG
193.37.255.114-GLOBALAXS-MNT
80.82.77.139-NET-1-77
80.82.77.33-NET-1-77
71.6.135.131-CARINET-5
71.6.199.23CARINET-5
185.165.190.17-BlackHOST
93.174.95.106-NET-3-95
185.165.190.34-BlackHOST

[LuemmelSec @theluemmel]

The Ransomware infecting ESXi hosts prone to CVE-2021-21974 is spreading.

- Check if your ESXi is reachable over the internet
- The latests patches are applied
- Disable or restrict access to the OpenSLP service
- Check for IOCs

Possible recovery steps if affected:
1/3

[Lucas Nery @lucasbnery]

Extrator de configuração do Cortex XDR 🛠

Ferramenta para ser usada durante as avaliações de #RedTeam com intuito de auditar as configurações XDR.

https://t.co/YdEZWRu3NN