Maxou56800

@[email protected]

[nickharbour @nickharbour]

The #flareon10 countdown is now live at https://t.co/M60cCMcxkX. Clear your weekend plans for Sept. 30th.

[Synacktiv @Synacktiv]

Microsoft offers a VPN solution called Remote Access Service. @ektoplasma_'s latest research sheds light on Microsoft VPN service's inner workings, and provides forensic aspects to improve incident response and the monitoring of this service.
https://t.co/SQPIgVnIxD

[Virus Bulletin @virusbtn]

The latest blog post from JPCERT/CC explains the details of, and countermeasures against, a new technique used in an attack that occurred in July, which bypasses detection by embedding a malicious Word file into a PDF file. https://t.co/hP2Aga91zM

[abuse.ch @abuse_ch]

Quak 🦆! Goodbye #Qakbot, I hope we won't see you ever again 👋. And this is how it looks like from Feodo Tracker' perspective ⬇️. All #botnet C2s are offline 🛑

https://t.co/GzMSvUB5ZH

Tango down! 💪

[0xor0ne @0xor0ne]

Ghidralligator is a tool by @AirbusCyber to emulate Ghidra p-code for fuzzing with AFL++

Github Repo: https://t.co/RzvtuaGVFz

#ghidra #fuzzing #infosec

[Thalium Team @thalium_team]

Baptiste et R.M. présentent Symless, un outil de documentation automatique de base IDA. #SSTIC

https://t.co/5TK7LhC7k1…

Symless est disponible ici : https://t.co/RXdEf7MehQ

[にのせき @ninoseki]

Wow #botconf is live streaming on YouTube!
https://t.co/w3UBN8aGx1

[vx-underground @vxunderground]

Twitter HQ is closed until November 21st. 75% of Twitter staff have chosen a severance package.

Backup information:
Mastadon: [email protected]
Telegram: https://t.co/ADr8zbusf9

tl;dr Twitter HQ right now

[Abdallah Elshinbary @_n1ghtw0lf]

Hey everyone, I published a new blog about using #YARA for malware config extraction. I used #RedLine stealer for demonstration (extracting C2 and BotnetID).
https://t.co/GIHCiOF6m2

[BeeRumP @BeeRumP_Paris]

Après 3 ans de pause, BeeRumP 2022 aura lieu le 16 septembre dans les locaux du @GroupeESIEA à Ivry !
Vous pouvez d'ores et déjà envoyer vos soumissions de rump à [email protected] (le meilleur moyen d'avoir une place 😁) !

[vx-underground @vxunderground]

Lockbit ransomware group has named Lockbit 3.0 as "Lockbit Black".

[mr.d0x @mrd0x]

Bypass Defender AV static detection:

If you name a malicious file DumpStack.log Defender doesn't scan it.

[abuse.ch @abuse_ch]

#Emotet has almost doubled its botnet C2 infrastructure in the past 24 hours from 8 active C2s yesterday to 14 active C2s today 🔥🪲 We have also observed an increase of Emotet malspam today 📩

It seems to be very clear that Emotet is firing up its activity! 💥 Be prepared! 🛡️

[ESET Research @ESETresearch]

#ESETresearch discovered a trojanized IDA Pro installer, distributed by the #Lazarus APT group. Attackers bundled the original IDA Pro 7.5 software developed by @HexRaysSA with two malicious components. @cherepanov74 1/5

[@mikko @mikko]

Video clip from the big Emotet malware takedown this week. Notice the gold bars. Video source: National Police of Ukraine

[Zenk-Security @ZenkSecurity]

Atelier Buffer overflow 101 - Jour 1 [CPU, RAM et GDB] - Ce soir (27 mai) à 20h30 animé par @Beaujeant - https://t.co/sy7N6fx0LA

[Cabusar @cabusar]

Atelier sur la sécurité bas niveau ce soir à 20h30 sur le Discord de @ZenkSecurity

Niveau : débutant
Animés par @beaujeant
Accès public

https://t.co/TwDu0jvbMW

[Maxou56800 @Maxou56800]

Sweat @ZenkSecurity pour descendre dans les catacombes

[/r/netsec @_r_netsec]

TeamViewer stored user passwords encrypted, not hashed, and the key is now public https://t.co/26oSF3mc6a