B3ndik (@vmptrst) 's Twitter Profile
B3ndik

@vmptrst

ID: 1641045068

calendar_today02-08-2013 18:22:15

30 Tweet

110 Followers

492 Following

Nick Carr (@itsreallynick) 's Twitter Profile Photo

We found the full CARBANAK source code & previously unseen plugins. Our #FLARE team spent 500 hours analyzing the 100,000+ lines of code. ๐•ธ๐“Ž๐–๐–Ž๐–‘๐–‘ โ˜ ๏ธ & James T. Bennett just dropped day 1 of their 4-part blog series: fireeye.com/blog/threat-reโ€ฆ Source code linked in blog. #CarbanakWeek ๐Ÿฆˆ๐Ÿ’ณ

We found the full CARBANAK source code & previously unseen plugins.

Our #FLARE team spent 500 hours analyzing the 100,000+ lines of code.
<a href="/mykill/">๐•ธ๐“Ž๐–๐–Ž๐–‘๐–‘ โ˜ ๏ธ</a> &amp; <a href="/jtbennettjr/">James T. Bennett</a> just dropped day 1 of their 4-part blog series: fireeye.com/blog/threat-reโ€ฆ
Source code linked in blog. #CarbanakWeek ๐Ÿฆˆ๐Ÿ’ณ
Vitaly Kamluk (@vkamluk) 's Twitter Profile Photo

Technical details and IOCs from our #ShadowHammer research, link to #ShadowPad attacks: securelist.com/operation-shadโ€ฆ

Nick Carr (@itsreallynick) 's Twitter Profile Photo

. If you're looking to spice up the video: I work at a ๐—ฅ๐˜‚๐˜€๐˜€๐—ถ๐—ฎ๐—ป ๐—š๐—ผ๐˜ƒ๐—ฒ๐—ฟ๐—ป๐—บ๐—ฒ๐—ป๐˜ ๐—”๐—ด๐—ฒ๐—ป๐—ฐ๐˜†, we use Cobalt Strike to ๐˜€๐˜๐—ฎ๐˜† ๐—ถ๐—ป ๐˜๐—ผ๐˜‚๐—ฐ๐—ต ๐˜„๐—ถ๐˜๐—ต ๐—ณ๐—ฟ๐—ถ๐—ฒ๐—ป๐—ฑ๐˜€ ๐—ฎ๐—ฟ๐—ผ๐˜‚๐—ป๐—ฑ ๐˜๐—ต๐—ฒ ๐—ฒ๐—น๐—ฒ๐—ฐ๐˜๐—ถ๐—ผ๐—ป๐˜€.

B3ndik (@vmptrst) 's Twitter Profile Photo

Verifying myself: I am bendikh on Keybase.io. LS5U7X-s8C_Ljhn22uLYnW6xUrnX-jFAcTMD / keybase.io/bendikh/sigs/Lโ€ฆ

Yonathan Klijnsma (@ydklijnsma) 's Twitter Profile Photo

It was to be expected but sadly a reality now; an exploit kit for Android devices going around dropping ransomware: bluecoat.com/security-blog/โ€ฆ

Cyber Sun Tzu (@suntzusec) 's Twitter Profile Photo

If your opponent is ill-tempered, seek to social engineer him. Pretend to be weak, that he may grow arrogant. His jimmies will rustle.

Maarten van Dantzig (@maartenvdantzig) 's Twitter Profile Photo

Several security blogs advice to block iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea[.]com, this is the kill-switch domain, do >NOT< block it.

Lesley Carhart (@hacks4pancakes) 's Twitter Profile Photo

Every article that included a *live link* to the wcry killswitch domain. You suck and I hope your coffee is slightly sub par today.

Mathy Vanhoef (@vanhoefm) 's Twitter Profile Photo

Key Reinstallation Attacks: Breaking WPA2 by forcing nonce reuse krackattacks.com and see the paper at papers.mathyvanhoef.com/ccs2017.pdf