Paul Melson

Author/Operator of @ScumBots. Blue Team by day, Blue Team by night. Opinions, typos, and bad grammar do not represent my employer. He/Him

[Paul Melson @pmelson]

Rather than continue to bang my head against the increasing frequency of nonsense errors and timeouts coming from Twitter’s APIs, I’ve decided just to move ScumBots. You can now follow it here on https://t.co/8N6ms5F9Tg: https://t.co/xDgqFph1yH

[Paul Melson @pmelson]

@skocherhan Related:

[Paul Melson @pmelson]

@ImposeCost Yes, now that it’s too cold for cargo shorts.

[SLEUTHCON @SLEUTHCON]

Check out his full talk here
https://t.co/qOVediz6du

[SLEUTHCON @SLEUTHCON]

Paul Melson joined us this year as our keynote speaker to talk about the history of crimeware and its evolution through the years.
In his keynote he also gives some good advice to those who are in the field and creating their professional network. Check out what he had to say!

[TomU | I'm still here... til the end 🕊️🇨🇭 @c_APT_ure]

#MalwareChallenge
New way to embed b64-enc EXE in image
@Cryptolaemus1
@executemalware
@HazMalware
@James_inthe_box
@JAMESWT_MHT
@JRoosen
@lazyactivist192
@luc4m
@malwrhunterteam
@MsftSecIntel
@JohnLaTwC
@neonprimetime
@ps66uk
@Racco42
@utsuk_ladki
@l3m0ntr33
@H_Miser
@pmelson

[Paul Melson @pmelson]

@ryanlrussell @vxunderground @abuse_ch @mal_share Candidly, I wish they wouldn’t. It would make it a lot easier for them to kick malicious payloads off their site.

[Paul Melson @pmelson]

@0xtomflow follow back for DM? it’s about your testing on webhook[.]site this weekend

[NexusFuzzy 💩 @NexusFuzzy]

I found a what I think novel approach which allowed me to list some of the content of #Lumma #Infostealer Command & Control servers with the help of left behind .DS_Store files. Blog, tool and Lumma files can be found here https://t.co/2SjH9HSX3Q

[Paul Melson @pmelson]

@klrgrz @ImposeCost

[Paul Melson @pmelson]

@klrgrz @SLEUTHCON ‘Sleuthy and The Grizz’

[Tom @human_decoded]

@SLEUTHCON off to a great start.
My lesson learned from @pmelson is:

make friends, they probably know something you don’t, and the Intel space is all about not not knowing things

#sharingIsScaring
#CTI

[Andrew Thompson @ImposeCost]

We're kicked off at #SLEUTHCON with @pmelson discussing the importance of networking in cyber, not for packet routing or job hunting, but disruption opportunities by pooling our collective access. I agree. Collectively, we're actually more powerful than state actors in many ways.

[💻 Sherrod DeGrippo @sherrod_im]

Get ready for this year's Sleuthcon by listening to the episode of THE Microsoft Threat Intelligence podcast all about ScumBots with Paul Melson!
https://t.co/0cRsONXIIB

[SLEUTHCON @SLEUTHCON]

We are excited to announce our 2025 SLEUTHCON keynote speaker: @pmelson, VP of Cybersecurity at Capital One and author/operator of @ScumBots

With over two decades of experience defending networks and disrupting adversaries, Paul brings unmatched insight into the economics of cybercrime.

His talk, A Brief History of Crime[ware], traces the evolution of monetized malware and explores how we can stop attackers by targeting what they care about most: profit.

 📍 June 6 | Arlington, VA + Virtual
 🎟️ Early bird pricing ends soon
 🗓️ CFP closes April 18
 ⚠️ This event will sell out

REGISTER TODAY: https://t.co/mzI2rQEHA3

[Paul Melson @pmelson]

@jamieantisocial There was a time 8-9yrs ago when this gap was closing, but with the rise of ransomware / extortion, persistence is of low importance to crimeware actors and scale is more important than targeting, so the gap has widened by a lot.

[Paul Melson @pmelson]

@AndyDormire @ImposeCost @sherrod_im You’ve been holding onto this for 33mos?

[Paul Melson @pmelson]

@ItsReallyNick 1btl of 20yr and all of the Larue they will sell me

[Paul Melson @pmelson]

Today I am thankful for all of the folks working a shift and watching the wires to keep us safe. I see you and I appreciate you.

[Michael Schwartz @schwartzonsec]

@censysio Censys has many open positions open right now across the company: sales, marketing, product, engineering, and research. Come join the team building the next generation of Internet scanning technology, the Internet Intelligence Platform. https://t.co/rVqyOURhnr