Mika Aalto

CEO of HoxHunt - Securing companies against social engineering attacks. Mostly tweeting about infosec and Nordic startup life. Opinions are my own.

[Mika Aalto @mpaalto]

@mattsoutherden @hoxhunt Hi Matt, I’m really sorry for the negative experience! We are working on a revamp on the missing mechanism and would love to hear your feedback. DM me and lets setup a Zoom call.

[Mika Aalto @mpaalto]

@MarkoTJEkqvist Jos kyseessä THL:n tilasto, niin THL ei julkaise tilastoa COVID-19 kuolemista. Kannattaa tutustua https://t.co/rvz90PrXsk ettei menisi #fakenews puolelle.

[Mika Aalto @mpaalto]

@gmail Is there any possibility for a non-corporate user to know in which country their data is being processed or stored? Is it spread throughout all Google datacenters or is it so that EU users data is always stored only inside EU?

[Mika Aalto @mpaalto]

@teliafinland Kuitu lähti toimimaan kunhan ei käytä Telian nimipalvelimia. Cloudflaren 1.1.1.1 ja Googlen 8.8.8.8 hyviä vaihtoehtoja.

[We need to talk about InfoSec @talkaboutsec]

Good day people, I’m back with a new episode! This time I kick things off with Riku Juurikko (⁦@RikuJuu⁩), and we discuss persuasion in the form of social engineering! Tune in! ⭐️ https://t.co/uESatRJGhl

[Mika Aalto @mpaalto]

Brilliant 👌

[MG @_MG_]

You like wifi in your malicious USB cables?

The O•MG cable
(Offensive MG kit)
https://t.co/Pkv9pQrmHt

This was a fun way to pick up a bunch of new skills.

Not possible without help from: @d3d0c3d, @cnlohr, @IanColdwater, @hook_s3c, @exploit_agency

#OMGCable

[Lesley Carhart @hacks4pancakes]

Boy, I’m not seeing much evidence of “targeting” in what has been published, but the vulnerabilities to news media persist, and we’ll see.

[Mika Aalto @mpaalto]

@TommiRasila

[SwiftOnSecurity @SwiftOnSecurity]

“Password must contain a special character.”
well okay
“Password cannot be longer than 20 characters.”
mother f

[Hel Tech @Hel_Tech]

The final #HELTech startup demo, @hoxhunt ending an evening full of interesting insights in data privacy. Thank you for all of our speakers for joining #HELTech @ReaktorNow #LauriLove @digiflak @KaisaSalakka @unity3d

[Kim Westerlund @_KimWesterlund]

Email security training for employees be like. Before @hoxhunt https://t.co/7v0jl8mzY0

[Mika Aalto @mpaalto]

@rsiilasmaa Kiitos samoin!

[Mika Aalto @mpaalto]

Breaking. https://t.co/WAeOmx4asw

[Lemi Orhan Ergin @lemiorhan]

Dear @AppleSupport, we noticed a *HUGE* security issue at MacOS High Sierra. Anyone can login as "root" with empty password after clicking on login button several times. Are you aware of it @Apple?

[Nikolaos Chrysaidos @virqdroid]

Fake WhatsApp Update on #GooglePlay . Under the "same" dev name. Incl. a Unicode whitespace. One Million downloads
https://t.co/qjqxd6n6HP

[Mårten Mickos @martenmickos]

Hilton was fined $700k for a data breach. Under GDPR it would be $420m (that's 600X)
https://t.co/lojpNS8vSS

[@mikko @mikko]

I am happy to announce that I have joined the advisory board of HoxHunt! https://t.co/JjmFAftUMw

[SwiftOnSecurity @SwiftOnSecurity]

Malware chain: Sends to bitly, then to https://t.co/dnFRr9Ur7c open redirect to https://t.co/Roc9tu5WMo, which downloads executable .js

[MalwareHunterTeam @malwrhunterteam]

Congrats to everyone who looks at this and thinks "this seems to be something legit".
👏😂
Humans...
😢😫
cc @benkow_

[John Lambert @JohnLaTwC]

No it's not Candy Crush. It's a PoC for a reverse shell implemented as a COM scriptlet.