CheshireChat

음식 애인 / 여행자/호기심/curiouslycurious/infosec DFIR/Researcher. The views expressed are my own & not the opinions of my org.

[CheshireChat @rayrayssi]

Get your @MISCconf tickets today! Don't wait, do it NOW! (This msg approved by Moss) #ITSecurity #infosec #crypto

[CheshireChat @rayrayssi]

@Target, shocked how bad your customer support is. I was given a non-existent number & your 1-800 line leads to a dead end. For something as simple as resetting an account email . How is this acceptable from such a large company? #badcustomerservice

[CheshireChat @rayrayssi]

Just had the worst experience with @UberEats support. They responded with a message meant for someone else and didn’t address my issue at all. Still waiting for my voucher to be resolved. Extremely disappointed. #CustomerServiceFail #ubercustomer #wastedaday

[CheshireChat @rayrayssi]

@HomeDepot you need to get better customer service support. Are you trying to lose business?

[CheshireChat @rayrayssi]

@tesseractjane Boulder is currently not being evacuated. Louisville and Superior which are part of Boulder county are being evacuated.

[Kirstin @Roozersmom]

Officer Eric Talley is my big brother. He died today in the Boulder shooting. My heart is broken. I cannot explain how beautiful he was and what a devastating loss this is to so many. Fly high my sweet brother. You always wanted to be a pilot (damn color blindness). Soar.

[CrowdStrike @CrowdStrike]

Only a few days left in @CrowdStrike's first #CTF! Lots of movement at the top of the #AdversaryQuest scoreboard. Can you score in the top 50 and win cool CrowdStrike swag? You have 72 hours to go! https://t.co/oG2ogfmbaj #hacking #cyber

[CrowdStrike @CrowdStrike]

On January 12, 2021, Microsoft released a patch for CVE-2021-1678, an important vulnerability discovered by @CrowdStrike researchers. In this blog, we show how companies can protect themselves from this vulnerability. https://t.co/jYqaMM4uv0 via @aionescu @eyal_karni

[0x4143 @0x4143]

New "ReBurn"(?) #RedLine #stealer #malware variant.
Appears to be in active dev compared with previous samples.

CC: @demonslay335 @malwrhunterteam

SHA256: 8a1fbcb86a1808bc9f6e4ba2998efc8b4b47862f6db95fd198a58b459e86060c

[CrowdStrike @CrowdStrike]

#CTF: We invite you to go head-to-head with three unique adversaries during our first-ever @CrowdStrike Intelligence Adversary Quest, Jan. 18-29, 2021. Register for the game today to join in on the fun: https://t.co/hgJEEyg9Fq #cybersecurity #ICYMI

[0x4143 @0x4143]

New Solaso(?) #Ransomware likely from the same author behind "Encrp ransomware"

Ransom note:
__READ_ME_TO_RECOVER_YOUR_FILES.txt

Fileext: filename.ext.solaso

SHA256: bd136b3fde933505cf3740c3800a5007e3a94a2d31f28416b04c212dcb0669b6

CC: @demonslay335

[CheshireChat @rayrayssi]

https://t.co/DTb4PJFogO

[CheshireChat @rayrayssi]

@0x4143 great mentor 😊

[0x4143 @0x4143]

Unknown(?) "Doris" #ransomware maybe in dev?
ransom note contains "abcd" with no message..

@demonslay335

Co-discovered with @rayrayssi

https://t.co/E2YHyg3Pne

[CheshireChat @rayrayssi]

@NERDBOMBERnick @deviantollam Haha yes! Good times! We need to plan another con trip.

[CheshireChat @rayrayssi]

@0x4143 stop being so cool #snapdragon #ransomware

[Amigo-A @Amigo_A_]

A new article #SnapDragon or #BurningEagle #Ransomware
in Digest
https://t.co/dPzqDEOUxA
Extension: .SNPDRGN
There is no ransom note or need another sample where it will be.
Thanks to @0x4143

[CheshireChat @rayrayssi]

@bigendiansmalls @bigendiansmalls so cheeky

[CheshireChat @rayrayssi]

Check out my friends awesomeness 🎉🎉

[0x4143 @0x4143]

Unknown #ransomware
"_encrypted" appended to filename.
README_encrypted.txt ransom note (no onion address specified)
99617ca878130477d08981b1eb6e3d27c7a8d281f9669e537bf5076209d2ce1a

[0x4143 @0x4143]

Unknown #ransomware
"_encrypted" appended to filename.
README_encrypted.txt ransom note (no onion address specified)
99617ca878130477d08981b1eb6e3d27c7a8d281f9669e537bf5076209d2ce1a

[Bob Diachenko 🇺🇦 @MayhemDayOne]

New Elasticsearch bot attack does not contain any ransom or threats, just 'meow' with a random set of numbers. It is quite fast and search&destroy new clusters pretty effectively

[CheshireChat @rayrayssi]

When some people talk it’s like 😅😂🤣😂😅 #infosec #wtfareyouspeaking

[National Mall NPS @NationalMallNPS]

In the wake of last night's demonstrations, there are numerous instances of vandalism to sites around the National Mall. For generations the Mall has been our nation’s premier civic gathering space for non-violent demonstrations, and we ask individuals to carry on that tradition.