Mosh

Malware Analysis & Ethical Hacking / #MalwareMustDie! #MMD! / CEH

[Mosh @nyxbone]

RANSOMWARE OVERVIEW UPDATED! (2016-2017) - Backup of a complete list of #Ransomware: https://t.co/aTbEAszGXb - G.D.: https://t.co/1Z0HpYacix

[Mosh @nyxbone]

@hasherezade :-D NICE!

[Mosh @nyxbone]

@struppigel Sub7

[Mosh @nyxbone]

@zerosum0x0 @metasploit Excelent Job Bro!!! Congrats!

[Michael Gillespie @demonslay335]

Update to decrypter for #STOP #Djvu #Ransomware - added OFFLINE keys for extensions .cosakos, .nvetud, .kovasoh, .brusaf, .londec, .krusop | https://t.co/vdbHyuyW7q

[Mosh @nyxbone]

@iVitorhorcajo Hola! Lamentablemente a la fecha no hay forma de recuperar los archivos (dentro de lo que se) sin realizar el pago del rescate :/

[Karsten Hahn @struppigel]

I wrote a detailed and technical article about ransomware identification for analysts. 😃
I put my 💙into this. Enjoy!
#GDataTechblog #GData #ransomware
https://t.co/pqgphYoqg9

[Mosh @nyxbone]

It looks like a new version of ERIS #Ransomware (2.0.3) with .TABGH extension.
CC: @malware_traffic @malwrhunterteam @BleepinComputer @malwaremustd1e #MMD!

[Mosh @nyxbone]

@Xylit0l @shakethemalware I love this

[Michael Gillespie @demonslay335]

.Updated #STOP #Djvu #Ransomware decrypter with OFFLINE keys for .roldat, .dutan, .sarut, .berost, and .forasom | https://t.co/isdhLCo7nW

[☩MalwareMustDie @malwaremustdie]

These are adversaries IP who had tried very hard to hack #MalwareMustDie infrastructure in past week:
213[.]136[.]86[.]40
193[.]188[.]22[.]253
185[.]153[.]198[.]200
194[.]28[.]112[.]50
193[.]188[.]22[.]12
198[.]108[.]67[.]48
210[.]245[.]89[.]85
124[.]128[.]225[.]190

#BLOCK!

[Mosh @nyxbone]

@hasherezade You deserve it! ;) Congratulations!

[Odisseus @_odisseus]

Hello @Arubait,
please check your server (hXXp://80.211.90.168/) which is delivering #ELF #IoT #Malware for #DDoS attack.
This time the #DDoS attack commands are codified in the .rodata area, down there, near the exploit 😜
Thank you @0xrb

[☩MalwareMustDie @malwaremustdie]

A wave of extortion emails came with this serious transcript, don't fall on this scam, NEVER ever pay them anything. What it is written are bluff & what they truly just aim is your pocket.
If you could, report this as victim to your nearest cyber police for further process.

[Xylitol @Xylit0l]

my sides

[☩MalwareMustDie @malwaremustdie]

#MalwareMustDie was formed in twitter in August 2012.
Back then was a "taboo" to raise awareness to resist #malware threat openly in twitter by sharing stuff & back then the knowhow for malware RE was controlled by security vendors leaving the #infosec blind

We broke the taboo.

[Michael Gillespie @demonslay335]

Updated #STOP #Ransomware decrypter with a bunch of OFFLINE IDs/keys for extensions .kroput1, .charck, .kropun, .doples, .luces, .luceq, .chech, .pulsar1, and .proden. https://t.co/YY90BUqeMm

[nao_sec @nao_sec]

New #FalloutEK is using PoC on GitHub!
(CC: @kafeine, @jeromesegura, @malware_traffic)
https://t.co/L1J5QOwJWn
https://t.co/ehhwtQqC5j
https://t.co/7opIhvSxg4

[Marcelo Rivero @MarceloRivero]

#GandCrab 5.2 new undecryptable version in-the-wild 🦀response to the new BitDefender decryption tool in the strings 🧐☺️cc//@bbotezatu
MD5: ba2960ce267dc0f11e2683679ce038f7 catch by @tamas_boczan

[Mosh @nyxbone]

@CryptoInsane @0xffff0800 @Antelox TY!

[Mosh @nyxbone]

If you are searching for #RedTeam or #PenTesting INFO, take a look of this list of Awesome Red Teaming Resources: https://t.co/scqRfW85wM