We're hiring! Any TI people located in Europe want to come work with on our awesome global team?? We're looking for dev folks and tech analysts. TI Dev ninjajobs.org/job/326b150a53… Tech TI Analyst ninjajobs.org/job/66476970cb…

Yellow Liderc is an increasingly aggressive IRGC-affiliated actor with a history of expansive geographical and sector targeting. Here's a short blog on some recent malware and activity: pwc.com/gx/en/issues/c… #threatintel #ta456 #crimsonsandstorm #cuboidsandstorm

🚨 Job alert 🚨 A few open roles on the PwC #threatintel team for folks who love tracking APT actors, crime delivery botnets, building analysis tools and UI interfaces. Technical intel analyst (more in thread 👇): ninjajobs.org/job/66476970cb…

TI Development & Engineering: ninjajobs.org/job/326b150a53… Also roles for: - detection engineering - Customer-facing RFI analysis (incl crime/DDW etc.) Mostly EMEA-based but some opportunities in AU and US as well. DMs open so shoot me a message to discuss if interested!

I've released a short blog on IIS malware: pwc.com/gx/en/issues/c… In it, I give an overview of some IIS malware research that has been done already, present a case study into a custom backdoor I found earlier in the year, and release some tooling to help analyse IIS modules!

I also want to highlight the amazing work previously done by ESET Research into native IIS modules - it is the best resource if you want to learn more about how IIS malware works! welivesecurity.com/2021/08/06/ana…

Worthwhile and sobering insights from Chainalysis in their ransomware report: chainalysis.com/blog/ransomwar…

In September 2022, attendees at the inaugural LABScon heard about an actor I described then as "one of the most prolific, most deeply connected, and most technically advanced actors around". Events this week were a reminder that the video never went out, so here it is 👇

It’s been all things #RSAC the last couple weeks. I’m getting pumped to rep #pwc in a talk with on 🦋 on the importance of TI in incident response as well as a jocular exchange with my buddy @TactiKoolSec and others on an AI panel.

Vid of the day …

I am 100% not this attractive in real life, but nonetheless very excited to represent the PwC Threat Intelligence team and the badass work done by each and every one of my team at this year’s #SLEUTHCON - let’s GO

Go get 'em Katechondic !!!!!!! #sleuthcon

The #pwc threat intel team will be repping at both!!! Champagne problems as I like to say🥂Come say hi regardless of which path you choose. CC The Banshee Queen👑 on 🦋 Kris McConkey