Kushagra Choudhary

Cyber security guy, automobile enthusiast.
Sometimes, I ponder.

[Florian Roth ⚡️ @cyb3rops]

Ransomware actors evading EDR by pivoting through unsupported or unmonitored devices isn’t new. I wrote about this trend repeatedly - most recently in my blog post earlier this year.

My team constantly extends our collection methods to detect threats on even the most exotic devices.

Jamie’s post on LinkedIn
https://t.co/k0GJIYxTr1

S-RMs post on Akira
https://t.co/L4QI1dNci8

More details about the “Cyber Security Trends 2025” here
https://t.co/AFI9pbaF7M

[Neil Borate @ActusDei]

A Mumbai CA has a crazy dream - a secondary market in life insurance policies in India. First, let's understand the problem. Many people surrender LIC policies before maturity. They get back less than the premiums they've paid.

Ketan Mehta wants to buy the policies, put them in a trust and sell PTC against them to investors. According to Mehta both policy holders and investors will get tax-free payouts (mechanism shown in the graphic).

LIC has been resisting him for a long time but after a 10 year legal battle culminating in the Supreme Court, Mehta believes that the decks have been cleared for this new market - that he proposes to set up. Read more about it here: https://t.co/heRwGb3RXP

[Kushagra Choudhary @pinpwn]

Talking about thwarting attackers at scale.

Let’s connect at #AISS2023 organised by @DSCI_Connect

[AttackFence @AttackFence]

Join us at stall #16 at #AISS2023 hosted by @DSCI_Connect to experience the future of cybersecurity.

Venue & Dates: The Leela Ambience, Gurugram. 19th-21st December

#XDR #CyberSecurity #AttackFence #threatdetection

[Kushagra Choudhary @pinpwn]

@shotgunner101 Was leading the IR for a fortune500 company which outsourced IT infra services from another fortune500 firm. Turns out they were exchanging atleast 5 reports daily(same file) between the two orgs. Wonder what the impact could be like in such a scenario..

[Kushagra Choudhary @pinpwn]

@shotgunner101 I was talking about insight rather than effort. Template modification and DDE are normal techniques. The part where we use the file frequently interacted with is the genius.

[Kushagra Choudhary @pinpwn]

@shotgunner101 How much time did it take you to come up with no. 1?

[Kushagra Choudhary @pinpwn]

@vxunderground I would love to have ‘Rootkits and Bootkits’!

[vx-underground @vxunderground]

Benefits of joining the Infosec X (formerly Twitter) community

- Stay up to date with news
- Social network
- Become targeted by Threat Actors
- Establish & maintain bitter rivalries with people you'll never meet

[vx-underground @vxunderground]

NoBit ransomware group states they encrypt data in SHA 😭😭😭

[Kushagra Choudhary @pinpwn]

@UK_Daniel_Card @DevAndShoe such a twisty turny read

[Kushagra Choudhary @pinpwn]

@DevAndShoe @AbhishekSay haxx0r hai sab

[AttackFence @AttackFence]

Catch us at #CIO100 in Bengaluru on 13-14 October.
Lets work together for a safer future.
#attackfence #CybersecurityAwarenessMonth

[vx-underground @vxunderground]

Insert commas into your password so when your credentials are dumped into a CSV it breaks it

[AttackFence @AttackFence]

Happy Dussehra from AttackFence.
May the breaches you face are none.

#Dussehra #दशहरा
#attackfence

[Doug DeMuro @DougDeMuro]

Several states now offer electronic license plates. Here’s a sentence I never thought I’d say: This license plate is downloading an update.

[张惠倩 @momika233]

OS Command Injection in Openssl CVE-2022-1292

[Harsh Makadia @MakadiaHarsh]

Must know free tools for Startups:

@NotionHQ —Notes
@WriteSonic —Writing blogs
@canva —Graphics
@make_hq —Automation
@gumroad —Selling
@beehiiv —Newsletter
@testimonialto —Testimonials
@wotnot_io —Chatbot
@copy_ai —Writing copy
@TheQuillBot —Repharser
@loom —Video

10X output!

[AttackFence @AttackFence]

Wishing all of our Indian backers around the world a very happy Independence Day.

#HappyIndependenceDay🇮🇳
#AzadiKaAmritMahotsav #IndiaAt75

[Wietze @Wietze]

Today I'm launching #HijackLibs, an open-source, community-driven project tracking DLL Hijacking opportunities in in Windows

🌍 LIVE on https://t.co/2PJCgKno8e 👈
🆕 Currently comprising over 350 unique DLLs that can be targeted
🤝 Contribute via https://t.co/0mDNHOiJ7t