Adolf Středa

Crypto, programming and botnets.

[Jakub Kroustek @JakubKroustek]

Check it out – latest news from our Gen Threat Labs: the return of consumer ransomware, AI deepfakes in action, scams everywhere, and much more! 🚨 #GenThreatReport

[Gen Threat Labs @GenThreatLabs]

We've been tracking a curious one here. #GuptiMiner was exploiting a vulnerability in an update mechanism of eScan antivirus, deploying two types of backdoors and XMRig.
Read @JanRubin and @Milankovo001 deep-dive into this sophisticated threat.

https://t.co/BsAbgK2OMH

[Lu1g1n0 @lu1g1n0]

I’m speaking @avar_asia w/ @StredaAdolf about our analysis of tools used & data collected in an espionage attack presumably carried out by the #MustangPanda APT group targeting Burmese gov, political NGOs, & opposition groups. Read more on #AvastDecoded https://t.co/QqchLQ708W

[Gen Threat Labs @GenThreatLabs]

Websites using the DDoS code in the background without giving any notice are starting to pop up. Take care when visiting weather[.]town

[Adolf Středa @StredaAdolf]

@DuchyRE Are you sure that's a good idea? If you look at reasons for keeping servers closed-source, they are pretty sound - especially if you have a look at history of XMPP.

[Jan Rubín @JanRubin]

Read our latest investigation of a backdoored client from MonPass, Mongolian CA.

https://t.co/Cyg2MXdSMt

[Jan Rubín @JanRubin]

Don't hesitate and read our newest technical follow-up about the infected browser extensions that we just released (by Jan Vojtěšek and me).

https://t.co/qlJug4KPy6

[Adolf Středa @StredaAdolf]

Considering how elusive #Emotet is while having such a big impact with many other malware families relying on its infrastructure, it's really a great news to read about a successful and extensive operation against it.

https://t.co/VD3VPzZACr

[Adolf Středa @StredaAdolf]

@JanRubin thought that after unpacking #MehCrypter, the rest's gonna be short and easy. 10 pages later, he had to change his mind: https://t.co/VSD12Besrr #malware #ThreatIntelligence

[Martin Hron @thinkcz]

This week about getting updates that you really don't want to get by Jan Vojtesek. Brought to you by wizards of #ReverseEngineering here at
@avast_antivirus Find a few minutes, read and bookmark us for more: https://t.co/3ryobJh1Td #malware @backdoor #torrent

[Lu1g1n0 @lu1g1n0]

https://t.co/jfuYPh0fRS with @pkalnai

[Jan Rubín @JanRubin]

[CZ only]
Kdybyste si někdo chtěli poslechnout můj příspěvek na aktuální titulce iRozhlasu, tak ho najdete zde. (Vlevo se dá spustit i audio záznam.)
https://t.co/CygjHvB1VL

Podrobný technický článek o CoViperu, který jsme nedávno zveřejnili, najdete zde:
https://t.co/vZO2KmBYwx

[Adolf Středa @StredaAdolf]

I wish I had such an elaborate contingency plan

[Jenna 🥥 🌴 ⌬ @jennafranke]

Sounds like Berkeley instructors are handling #COVID19 well 😂

[Adolf Středa @StredaAdolf]

@Racco42 @JAMESWT_MHT @matte_lodi @Certego_IRT @malwrhunterteam @VirITeXplorer @reecdeep @a_de_pasquale @guelfoweb You're right, definitely seems to be Guildma (infection chain, format/module encryption, Delphi, object names, Nirsoft's binaries). That TTimer prefix _MidGardCdxDTmr1xa_ also seems to be familiar. Time to fire up IDR again.

[Adolf Středa @StredaAdolf]

@martijn_grooten Also sounds like a fine material for Cards Against Cryptography.

[Adolf Středa @StredaAdolf]

@neduchaljan @Rootcz Zrovna asi jedna z mála věcí, kterou nevyužiju :D *cries in dev-qt/qtwebengine*

[Botconf @Botconf]

#botconf2019 Live streaming will be back at 14:55 https://t.co/xl8gCHFruE

[Botconf @Botconf]

#Botconf2019 schedule was updated with a keynote on #Retadup by speakers from @Gendarmerie and @avast_antivirus https://t.co/NxGTRM5JGE :-)

[Adolf Středa @StredaAdolf]

@neduchaljan Celá ta debata je perla - jedna strana chce zadávat z paměti heslo do neznámého počítače a druhá pro změnu kritizuje laické rady a následně tvrdí, že zapamatovatelná hesla jsou méně bezpečná. Jediná světlá stránka je, že ta banka už objevila "nová" doporučení NISTu.