Interesting reading about UEFI, secure boot and BlackLotus bootkit Credits Alex Matrosov (BINARLY🔬) binarly.io/posts/The_Unto… #malware

📞 Is there more to #ScamCalls than meets the eye? In a new episode of the CP<Radio> podcast, we explore the Android #malware 'FakeCalls' and how it imitates financial organizations to trick people into sharing their credit card details. Tune in: bit.ly/3BOVr3K

This is my first red-team engagement, I don't have much experience on doing red team but I'm glad I was able to achieve something 🥳 mr-r3bot.github.io/red/team/2023/…

Study by Sophos details the amount companies are paying following #ransomware demands with "The average payout by companies with revenues of more than $5bn a year was just under $2.5m" theguardian.com/technology/202… #malware #cybersecurity #infosec

IcedID Macro Ends in Nokoyawa Ransomware ➡️Initial Access: IcedID XLS Macro ➡️Credentials: LSASS, Creds in Files ➡️Persistence: Scheduled Task ➡️Lateral: RDP, SMB, WMI, WinRM, Psexec ➡️C2: IcedID, Cobalt Strike, VNC ➡️Impact: Nokoyawa Ransomware thedfirreport.com/2023/05/22/ice… 1/X

NoName hackers group claims to have targeted - Website of the British river bus running along the Thames in London, Thames Clippers. - Website administrators of the Italian Transport Regulatory Authority. #UK #Italy #cti #threatintel #cyberattack #ddos

Join us TOMORROW, May 23, at 12 noon ET to see how the Tidal Enterprise Edition makes it easy to focus on relevant threats, identify and sove security gaps, and easily report on your organization's overall cyber risk. #demoday #cyberrisk #threatintel hubs.la/Q01QFX4J0

#HappyMonday! The DFIR Report released another report, this time they provide details of an incident that started with #IcedID and ended with #Nokoyawa #ransomware. #HappyHunting! #CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting #ThreatDetection

Chaining DLL Hijacking and Format String to gain RCE on windows RDP Client CVE-2023-24905 cyolo.io/blog/dll-hijac…

Saqib Chand 🇵🇸 WAF bypasses have a limited timespan.

A QoL tool to obfuscate shellcode. In the future will be able to chain encoding/encryption/compression methods. github.com/iilegacyyii/Sh…

Bircan Yıldırım

phishstats.info detected 84 new websites hosting #phishing | new today: 3407 | #infosec #cybersecurity #malware

Python Package Index unable to cope with #malware submissions • The Register securecybersolution.com/python-package…

Watch out, #CapCut users! A series of phishing sites are distributing malware while pushing fake CapCut downloaders. Read: hackread.com/capcut-users-p… #Security #Malware #Phishing #TikTok #Scam

In the past 24 hours, 791 IoC's were submitted and #QakBot is the most seen #malware family on abuse[.]ch

Fletch Top Threat Alert: Hackers infect TP-Link router firmware to attack EU entities - #BronzePresident #FletchScore = Medium/Mainstream #CyberSecurity #ThreatIntel #InfoSec #PlugX #RedDelta #BronzePresident #Korplug #Hodur hubs.li/Q01QNkQK0

cocomelonc.github.io/malware/2023/0… next one. Used by #comrat and #turla APT. #cybersec #cybersecurity #infosec #hacking #cybercrime #malware #malwareanalysis #malwareattacks #redteam #blueteam #purpleteam #winapi #windows #programming

Fletch Top Threat Alert: Rewterz Threat Advisory - CVE-2023-2181 - GitLab Vulnerability - #CVE-2023-2181 #FletchScore = High/Trending #CyberSecurity #ThreatIntel #InfoSec CVE-2023-2181 hubs.li/Q01QNFzn0