Y

[Y @mxm0z]

@0x6rss Excellent analysis! One thing though: The second largest slice in the victim geo chart of 29% is doing a lot of heavy lifting to be classified only as "Others". Would love to see that broken down further, there's probably some interesting regional patterns hiding in there.

[Y @mxm0z]

@pinkflawd welp, I see this as a good thing. It is all about perspective…

[Y @mxm0z]

Let's wait and see in the next couple of months:

[Y @mxm0z]

@banthisguy9349 @AlvieriD @BleepinComputer @TechCrunch @TheRecord_Media This is not new. Only new results of the incident analysis.

[Y @mxm0z]

@anton_chuvakin Ooh I see now. 100% agree with you.

[Y @mxm0z]

@anton_chuvakin I think Im starting to understand ur questioning and I if my understading is correct it is a valid questioning but I'm failing to see the point u are trying to achieve with this questioning. I dont wanna believe this is basically you saying "stop doing crappy research; do better"

[Y @mxm0z]

@anton_chuvakin What is threat intel as entertainment?

[Y @mxm0z]

@AlvieriD You mean attacking companies that uses critical infrastructure, right? Is there evidence that they actually attacked any CI itself?

[Y @mxm0z]

@Malcoreio @vxunderground

[Y @mxm0z]

@vxunderground

[LP @jotunvillur]

Intelligence without analysis and context is just gossip

[The Final Hop @TheFinalHop]

Special thanks to @mxm0z for bringing the issue of the ThreeAM Leaked Data breach to light.

[Y @mxm0z]

@SwiftOnSecurity I can literally type any reply I want and hit the send button

[Y @mxm0z]

@TheFinalHop @luc4m @socradar @CyberSleuth1 @BleepinComputer @BroadcomSW @luc4m and @TheFinalHop I'm a mere mortal and I can't DM you because your profiles your DMs are closed 😂 Please DM me instead

[Y @mxm0z]

Spotted #3AM #ThreeAM #Ransomware blog already listing 6 victims, first one being on Aug 24th

A lot of noise since yesterday but seems like this group is already working for some time

@socradar @CyberSleuth1 @BleepinComputer @TheFinalHop @BroadcomSW

#threatintel #darkweb

[Y @mxm0z]

@socradar @CyberSleuth1 @BleepinComputer @TheFinalHop @BroadcomSW Correction: First victim was published on Aug 4th

There are posts dated as Aug 4, 22, 24, 29 and Sept 4 and 12.

#3AM #ThreeAM victims so far are mostly from USA, only one of them being from Malaysia.

Targeted industries includes:
Construction,
Food,
Healthcare
and Marketing.

[Y @mxm0z]

Anyrun report from September 5
https://t.co/SNVvgUkE42
hxxp://85.159[.]229.62/g[.]pixel
#3AM #Ransomware #IOC

[SOCRadar® @socradar]

🔍The affiliates attempted to use #LockBit in a #ransomwareattack but were blocked, prompting them to use a new strain of #ransomware called #3AM instead. This could start a new trend in ransomware attacks.

Read more👇

https://t.co/5UWagvOOu4

[Y @mxm0z]

@Malcoreio where is mine 🥲

[Y @mxm0z]

@lordx64 is NATO some sort of role model now? Dont think so. This discussion is deeper than that. Yeah, the tool should be more accessible, but 1. They are a business and 2. imho this suggested accessibility criteria doesn't make much sense.