Quang Tran

Reverser, malware analyst, security reseacher, CTF player and also programmer.

[Quang Tran @quangtrm]

🇻🇳 [VIETNAMESE] Link báo cáo:
- Phần 1: https://t.co/Bao3hgUS5J
- Phần 2: https://t.co/oWAo2EM3l2
- Phần 3: https://t.co/aCkLqlUAlf

[Quang Tran @quangtrm]

🇬🇧 APT Lotus Blossom is back - stealthy, dangerous, and active in Vietnam. Using stolen VPN creds, EDR hijacking & Domain Fronting to evade detection. Latest campaign: Jul 2024. Full report in comment.
#cybersecurity #APT #viettelthreatintelligence #vti

[Quang Tran @quangtrm]

🇬🇧 [ENGLISH] Report link:
- Part 1: https://t.co/BAJlQuUdGl
- Part 2: https://t.co/0aj9pbWQ32
- Part 3: https://t.co/tnO9ZMfzp4

[Quang Tran @quangtrm]

🇻🇳 APT Lotus Blossom đang hoạt động mạnh tại Việt Nam. Tấn công tinh vi: chiếm VPN, phát tán mã độc qua EDR & ẩn C2 bằng Domain Fronting. Chiến dịch mới nhất: 7/2024. Xem báo cáo chi tiết ở bình luận.
#anhninhmang #APT #viettelthreatintelligence #vti

[TrendAI Zero Day Initiative @thezdi]

That's a wrap on #Pwn2Own Toronto 2023! We awarded $1,038,250 for 58 unique 0-days during the event. Congratulations to Team Viettel (@vcslab) for winning Master of Pwn with $180K and 30 points. We'll see you at Pwn2Own Automotive in Tokyo next January.

[TrendAI Zero Day Initiative @thezdi]

Success! Team Viettel was able to execute a heap-based buffer overflow and a stack-based buffer overflow against the TP-Link Omada Gigabit Router and the Canon imageCLASS MF753Cdw for the SOHO Smashup. They earn $50,000 and 10 Master of Pwn points. #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Success! Team Viettel was able to execute an OOB write against the Sonos Era 100. They earn $30,000 and 6 Master of Pwn points. #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Success! Team Viettel was able to execute a stack-based buffer overflow attack against the HP Color LaserJet Pro MFP 4301fdw. They earn $20,000 and 2 Master of Pwn points. #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Success! ANHTUD was able to execute a stack-based buffer overflow attack against the Canon imageCLASS MF753Cdw. They earn $10,000 and 2 Master of Pwn points. #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

That’s a wrap for Day 2 of #Pwn2Own Toronto 2023 – we’ve awarded a total of $801,250 so far this week! We’ll be back tomorrow with another full day of attempts. See the full schedule and today’s results at https://t.co/SOqsl3FaeD

Leaderboard as of today:

[TrendAI Zero Day Initiative @thezdi]

Success! Team Viettel (@hoangnx99, duongdpt, Ha Anh Hoang from @vcslab) executed a 2-bug chain against the QNAP TS-464. They earn $20,000 and 4 Master of Pwn points. #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Success! Team Viettel was able to execute a stack-based buffer overflow attack against the Canon imageCLASS MF753Cdw. They earn $10,000 and 2 Master of Pwn points. #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

That’s a wrap for Day 1 of #Pwn2Own Toronto 2023. We’ve already awarded a total of $438,750 in prizes! We’ll be back tomorrow with another full day of attempts. The current leaderboard is below.

See today’s results and the full schedule at https://t.co/SOqsl3FaeD

[TrendAI Zero Day Initiative @thezdi]

Success! Team Viettel (@hoangnx99, @vudq16, @biennd279, @_q5ca from @vcslab) were able to execute a single-bug attack against the Xiaomi 13 Pro. They earn $40,000 and 4 Master of Pwn points. #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

#Pwn2Own Toronto 2022 ends with the namnp team using a unique bug to exploit the #Canon printer. They close out the event with $10,000 and 1 Master of Pwn points.

[TrendAI Zero Day Initiative @thezdi]

And that's a wrap! Congrats to DEVCORE and @orange_8361 for winning Master of Pwn for Toronto 2022. Thanks to all who participated and special thanks to #Google and #Synology for co-sponsoring the event.

[TrendAI Zero Day Initiative @thezdi]

At the end of Day 3 of #P2OToronto here's the current leaderboard. While DEVCORE is in the driver's seat - there is still a theoretical possibility that another team can still take a share of the lead. Let's see what our final day brings us! #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

On the first win of Day 3 of #P2OToronto, @biennd279 and @rskvp93 from Team Viettel (@vcslab) used a command injection on a WD NAS to help add a little extra holiday decoration to the venue! This nets the team another $20K and 4 MoP points! #Pwn2Own

[TrendAI Zero Day Initiative @thezdi]

Team Viettel (@rskvp93, @_q5ca, @hoangnx99 from @vcslab) with another win! #P2OToronto #Pwn2Own