Phantom Security Group

Automating the hard parts of Offensive Security. Creators of EvadeX and ApeX

[Grant Smith📡 @S1n1st3rSecuri1]

This was an interesting case we found when testing @Surfacesec’s phishing detection engine.

It involves HTML smuggling but not in the way we typically think of it from a red team perspective.

https://t.co/i2Mzuwj6Pg

[Grant Smith📡 @S1n1st3rSecuri1]

@Surfacesec just released their platform and as a red teamer, it’s good.
- Adaptive learning of auth endpoints
- Surface Vision: Patent-pending architecture of visual and code signals to catch phishing.
- Sovereign architecture: Your data stays yours

I’ve linked their post below

[Grant Smith📡 @S1n1st3rSecuri1]

At @phantomcybersec we save your Red Team time and, in-turn, save you money. Operators get to spend more time operating and less developing and debugging.

Purchase EvadeX, with our Guarantee that it will bypass your target security product, and your operators will thank you.

[Phantom Security Group @phantomcybersec]

When you train with offensive tooling that pushes beyond what most real-world APTs are capable of, real incidents stop feeling chaotic. EvadeX gives red teams access to advanced, continuously evolving evasion so exercises demand clearer thinking than an actual attacker ever will.

[Phantom Security Group @phantomcybersec]

EvadeX just got a solid round of upgrades. We’ve recently updated a number of anti-analysis features, improved our C# obfuscator, and expanded the portal with in-depth details and operator resources so you can make your operations more evasive based on the C2 framework you use.

[Grant Smith📡 @S1n1st3rSecuri1]

Great talking with Matteo Wong @TheAtlantic the other day about smishing and the Smishing Triad, along with the new Google lawsuit against the group.

Highly recommend reading Matteo’s article here: https://t.co/KSucriHcZl

[Phantom Security Group @phantomcybersec]

drawn-out setups.

💻 This offer is available only to verified members or red teams at legitimate companies based in NATO countries or Australia. Verification is required before a license is issued.

Reach out today: info(@)https://t.co/y4QL8lDEJR

[Phantom Security Group @phantomcybersec]

🛑 Stuck trying to bypass EDRs every engagement, or paying providers who make you chain 5 to 10 options before anything even runs? Try EvadeX with a one-week trial you can use on real engagements to test templates, validate evasions, and see how a simple selection beats long, …

[Phantom Security Group @phantomcybersec]

A little shocked and awstruck that we are even on the radar of this multi-billion dollar company, but shows we are doing something right.

[Phantom Security Group @phantomcybersec]

All while using our simple point and click evasion templates. That outcome demonstrates our focus on practical, repeatable effectiveness rather than flashy one-offs.

Learn more at https://t.co/jZWfFTfWm1

[Phantom Security Group @phantomcybersec]

We design EvadeX and our evasion templates to be resilient, not a long, drawn out process of chaining a bunch of steps together to hopefully work on your end.

CONT. BELOW

[Phantom Security Group @phantomcybersec]

A recent red team engagement highlighted why that approach matters: “We were able to get a working payload using EvadeX and Adaptix C2 that could run commands within a sensitive environment, including interacting with LSA/SAM, without detection from CrowdStrike with Overwatch.”

[Phantom Security Group @phantomcybersec]

New EvadeX Release Tonight!

This includes multiple new features and execution techniques along with a new C# obfuscater to assist in your post exploration needs.

[Phantom Security Group @phantomcybersec]

Register here: https://t.co/7UzvEc8JUP

[chompie @chompie1337]

BYOVD is no longer required on modern Windows. a bunch of recent msft kernel patches just shove vulnerable kernel code behind a privilege check. I wonder if we will see threat actors leveraging this like they did BYOVD. no bringing along a driver and loading also means less IOCs

[Phillip Wylie @PhillipWylie]

From Hacking to Entrepreneurship: The PhantomSec Story https://t.co/8jSlHipp0f

[Phantom Security Group @phantomcybersec]

Register here: https://t.co/7UzvEc8JUP

[Phantom Security Group @phantomcybersec]

Are you an offensive security engineer, manager, director, or just a 1337 hacker who will be at DEF CON? Join the PhantomSec team after for our Post-DEF CON Meetup!

Will be a great place to grab a drink, some food, and to chat with other offsec folks after the busy week.

[K̵i̵r̵k̵ ̵T̵r̵y̵c̵h̵e̵l̵ @Teach2Breach]

@phantomcybersec Thought this was cool, so here's a rust library of the PoC in the blog post: https://t.co/LUcSY5E9Og

[mr.d0x @mrd0x]

FileFix - A ClickFix Alternative

https://t.co/OMU7UADf9J