Mathias Frank

Incident Response @Google (@Mandiant)

[Mandiant (part of Google Cloud) @Mandiant]

🚀 Mandiant Community Night is back 🚀

Join us on Thursday 13th Feb, 17:30 at Google London for exclusive insights on real-world attack trends, and connect with Cyber Security professionals!

🎟️ Limited spots—RSVP now: https://t.co/OFQxAYTLo8

[Mathias Frank @matdotsh]

The Mandiant Community Night 🇬🇧 is back for 2025!

Join us on February 13 in our London @Google office. You can expect a night of technical talks and networking with drinks and pizza! Spots are limited so get your names in to not miss out.

https://t.co/XsG3qTulNA

[Volexity @Volexity]

.@Volexity’s latest blog post describes in detail how a Russian APT used a new attack technique, the “Nearest Neighbor Attack”, to leverage Wi-Fi networks in close proximity to the intended target, while the attacker was halfway around the world.

https://t.co/R3aKyrjVYR

#dfir

[Mathias Frank @matdotsh]

You want to investigate challenging and impactful intrusions?
Mandiant has an opening for an Incident Response Consultant in their UK&I team🔥

https://t.co/lLt3H9NPUt

#Mandiant #Google

[Ollie Whitehouse @ollieatnowhere]

We released our analysis of Pygmy Goat - a native x86-32 ELF shared object that was discovered on Sophos XG firewall devices, providing backdoor access to the device.

https://t.co/IfUJMPHPqu

Yara / STIX / Snort etc

https://t.co/zy3l83QSzL

[Mathias Frank @matdotsh]

@Mandiant is hosting the next Community Night on May 29th. Join us in our London office for two spicy talks, drinks and snacks. Spots are limited, so get your names in before it's too late. 🔥🍻🍕

https://t.co/qrgJLOQdKy

[SSSCIP Ukraine @SSSCIP]

🧐 SSSCIP unveils new report: russian Cyber Operations (H2 2023)👇
https://t.co/150m9Vs62P

#cybercrime #cyberattack #hacker #cybersecurity #cyber #cyberwar #hybridwar #Espionage #spy

[Mandiant (part of Google Cloud) @Mandiant]

Mandiant reveals that a “hacktivist” persona created by APT44, has recently targeted & disrupted U.S. and Polish water utilities, as well as a French dam.

Read more on our latest findings here: https://t.co/sA5Cy1ckUB

#Mandiant #APT44

[Mathias Frank @matdotsh]

We have another opening in Mandiant's UK Incident Response team! #Mandiant #Google

https://t.co/2sHavlfurp

[Mathias Frank @matdotsh]

You want to investigate the most challenging and impactful intrusions?
We are looking for an incident responder to join our UK team 🔥
#Mandiant #Google

[John Hultquist @JohnHultquist]

APT29 (Midnight Blizzard/Cozy Bear) is targeting German political parties. The SVR has been on a tear lately and their mission of keeping Putin up to date on the West's thinking is especially important at this critical moment in the war. 1/2 https://t.co/KXLKOfuXyb

[Mathias Frank @matdotsh]

You want to investigate the most challenging and impactful intrusions?
We are looking for an incident responder to join our UK team 🔥
#Mandiant #Google

[Mitch Clarke @snozberries_au]

At long last we're recruiting for an incident responder in our UK team! If you're looking to work on some of the most challenging and impactful breaches around, this role is for you!

https://t.co/poq35UFnDX

[Mathias Frank @matdotsh]

@Mandiant is hosting the next Community Night on February 13th. Join us in our London office for two spicy talks, drinks and pizza. Spots are limited, so get your names in before it's too late. 🔥🍻🍕
https://t.co/Ka2oXYdCuM

[Kathryn Hedley @4enzikat0r]

Really cool to see how the recent critical Citrix Netscaler exploit worked to gain access to appliances thanks to @googlecloud @Mandiant Matthias Frank at @SANSInstitute @NCSC #CyberThreat23

[Mathias Frank @matdotsh]

🔥

[Sebastian Demmer @k0brax]

@Mandiant has identified 0- and n-day exploitation of Citrix NetScaler #CVE-2023-4966, which was abused to hijack sessions and compromise multiple organisations going back to late August 2023.
Here is a summary of what we found: https://t.co/8e9ZBbZW5w

[Mandiant (part of Google Cloud) @Mandiant]

UNC3886 has been exploiting a 0-day vulnerability in VMware ESXi hypervisors.

See our latest blog for more on this group, as well as steps organizations can take to detect and respond to a newly exploited 0-day vulnerability in VMware ESXi hypervisors.

https://t.co/El4cRUskwL

[Mandiant (part of Google Cloud) @Mandiant]

On May 31, 2023, Progress Software Corporation announced a wide exploitation of zero-day vulnerability in the MOVEit Transfer secure managed file transfer software.

Learn more here: https://t.co/SeMC3CRTVc

[Sebastian Demmer @k0brax]

Currently working on my new open-source project "Artifact-Graph", a knowledge graph that let's you explore overlaps and pivot points of forensic artifacts.
A very early Alpha version is online available at https://t.co/njzChyUpym
Let me know what you think!

[Mathias Frank @matdotsh]

@Mandiant is hosting the next edition of the Community Nights on May 18th. Join us in our London office for two spicy talks, drinks and pizza. Spots are limited, so get your names in before its too late. 🔥🍻🍕

[Mandiant (part of Google Cloud) @Mandiant]

M-Trends 2023 is live! Download the 14th edition of Mandiant’s unique analysis of today’s cyber threat landscape today.

https://t.co/WouGruDvxK

#MTrends #Cybersecurity

[Tyler McLellan @tylabs]

APT43 https://t.co/tjOvjsBMfO