Português
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어
SquiblydooBlog's profile picture. Malware Analysis Creator of Debloat, certReport, and http://TheCertGraveyard.org Want to chat? Join the Debloat discord: http://discord.gg/dvGXKaY5qr

Squiblydoo

@SquiblydooBlog

Malware Analysis Creator of Debloat, certReport, and http://TheCertGraveyard.org Want to chat? Join the Debloat discord: http://discord.gg/dvGXKaY5qr

2KPosts 4KSeguidores 89Seguindo
Talvez você curta
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
24 h

I love reporting the same malware, day after day. Week after week. This is why I built the Cert Graveyard. I can look back and see the other 49 times I've reported the same exact malware. For more on UNK-50, see tweet below: x.com/g0njxa/status/…

SquiblydooBlog's tweet image. I love reporting the same malware, day after day. Week after week. This is why I built the Cert Graveyard. I can look back and see the other 49 times I've reported the same exact malware. For more on UNK-50, see tweet below: x.com/g0njxa/status/…
g0njxa's profile picture. ChatGPT says I'm a cyber researcher :) | donate 💸 to g0njxa.eth 💖 | Bad student, enthusiast, defo not an expert DMs are open, feel free to reach! 😼☂️🟣
Who said what?
@g0njxa
25 de ago. de

In the past days I've been observing a malware campaign using X verified accounts affiliated to account @KindleBookVerse (I see +140 accounts, consider each one malicious) running malicious X ads redirecting users to a fake AI website delivering malware. While the ads redirect…

g0njxa's tweet image. In the past days I've been observing a malware campaign using X verified accounts affiliated to account @KindleBookVerse (I see +140 accounts, consider each one malicious) running malicious X ads redirecting users to a fake AI website delivering malware. While the ads redirect…
g0njxa's tweet image. In the past days I've been observing a malware campaign using X verified accounts affiliated to account @KindleBookVerse (I see +140 accounts, consider each one malicious) running malicious X ads redirecting users to a fake AI website delivering malware. While the ads redirect…
g0njxa's tweet image. In the past days I've been observing a malware campaign using X verified accounts affiliated to account @KindleBookVerse (I see +140 accounts, consider each one malicious) running malicious X ads redirecting users to a fake AI website delivering malware. While the ads redirect…
g0njxa's tweet image. In the past days I've been observing a malware campaign using X verified accounts affiliated to account @KindleBookVerse (I see +140 accounts, consider each one malicious) running malicious X ads redirecting users to a fake AI website delivering malware. While the ads redirect…
8
27
82
24
32K
0
3
12
2
2K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
24 h

I love reporting the same malware, day after day. Week after week. This is why I built the Cert Graveyard. I can look back and see the other 26 times I've reported the same exact malware. It also helps build detections. Easy to find and compare samples.

SquiblydooBlog's tweet image. I love reporting the same malware, day after day. Week after week. This is why I built the Cert Graveyard. I can look back and see the other 26 times I've reported the same exact malware. It also helps build detections. Easy to find and compare samples.
malwrhunterteam's profile picture. Official MHT Twitter account. Check out ID Ransomware (created by @demonslay335). More photos & gifs, less malware.
MalwareHunterTeam
@malwrhunterteam
20 de dez. de

"泉州浩英科技有限公司" (Certum given cert) signed "HUoRONG.msi" sample: 35d221d282a772437c17e374f666dab1423d7af7377f9300baf3612db23874e4 yandi1188[.]com 103.112.99[.]226 🤷‍♂️

malwrhunterteam's tweet image. "泉州浩英科技有限公司" (Certum given cert) signed "HUoRONG.msi" sample: 35d221d282a772437c17e374f666dab1423d7af7377f9300baf3612db23874e4 yandi1188[.]com 103.112.99[.]226 🤷‍♂️
1
1
8
2
2K
0
1
7
0
581
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
20 de dez. de

An awesome use of the Cert Graveyard: KQL queries to hunt for binaries within the environment. More about the TBS hashes soon. :)

SecurityAura's profile picture. GCIH, GCFE, GDAT | DFIR, TH, DE | @CuratedIntel DFIR https://t.co/BMWUwziTLh https://t.co/MmX2YNVqdk https://t.co/R20zseQfLk
Aura
 @SecurityAura
20 de dez. de

Thanks to a PR from @IFLinfosec , the CertCentral, now CertGraveyard (from @SquiblydooBlog ) KQL queries have been updated in the repo. I also added afterwards the new fields (TBS hashes) if people want to leverage them somehow. github.com/SecurityAura/D…

SecurityAura's tweet card. Repository where I hold random detection and threat hunting queries that I come up with based on different sources of information (or even inspiration). - SecurityAura/DE-TH-Aura
DE-TH-Aura/Defender for Endpoint/ExternalData - Cert Central, CertReport.md at main · SecurityAur...
Fonte: github.com
0
0
17
5
2K
0
4
19
2
2K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
20 de dez. de

OathboundLegends_Installer.exe signed by "SZVERES MARKETING SRL" 911 MB, too big for VirusTotal It's an infostealer. The traffer team DMs folk asking them to moderate a their community, and asks them to play the game.

SquiblydooBlog's tweet image. OathboundLegends_Installer.exe signed by "SZVERES MARKETING SRL" 911 MB, too big for VirusTotal It's an infostealer. The traffer team DMs folk asking them to moderate a their community, and asks them to play the game.
SquiblydooBlog's tweet image. OathboundLegends_Installer.exe signed by "SZVERES MARKETING SRL" 911 MB, too big for VirusTotal It's an infostealer. The traffer team DMs folk asking them to moderate a their community, and asks them to play the game.
0
5
16
3
4K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
20 de dez. de

I love reporting the same malware, day after day. Week after week. This is why I built the Cert Graveyard. I can look back and see the other 30 times I've reported the same exact malware. It also helps build detections. Easy to find and compare samples.

SquiblydooBlog's tweet image. I love reporting the same malware, day after day. Week after week. This is why I built the Cert Graveyard. I can look back and see the other 30 times I've reported the same exact malware. It also helps build detections. Easy to find and compare samples.
malwrhunterteam's profile picture. Official MHT Twitter account. Check out ID Ransomware (created by @demonslay335). More photos & gifs, less malware.
MalwareHunterTeam
@malwrhunterteam
20 de dez. de

"Taiyuan Chenyun Trading Co., Ltd." (Certum given cert) signed "Screenshot2025122068698m.pif" sample: 14d374ea0604f70e6f39306efd948e7962fdd21cdb3e187ba461312027ebd3f5 🤷‍♂️

malwrhunterteam's tweet image. "Taiyuan Chenyun Trading Co., Ltd." (Certum given cert) signed "Screenshot2025122068698m.pif" sample: 14d374ea0604f70e6f39306efd948e7962fdd21cdb3e187ba461312027ebd3f5 🤷‍♂️
2
4
9
3
3K
0
7
20
0
1K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
15 de dez. de

ScreenConnect signed by "CÔNG TY TNHH XB FLOW TECHNOLOGIES". This signer name was previously used to sign NinjaOne RMM tools which were delivered using the similar mechanisms: fake Adobe PDFs, fake Canva Setup, etc.

SquiblydooBlog's tweet image. ScreenConnect signed by "CÔNG TY TNHH XB FLOW TECHNOLOGIES". This signer name was previously used to sign NinjaOne RMM tools which were delivered using the similar mechanisms: fake Adobe PDFs, fake Canva Setup, etc.
SquiblydooBlog's tweet image. ScreenConnect signed by "CÔNG TY TNHH XB FLOW TECHNOLOGIES". This signer name was previously used to sign NinjaOne RMM tools which were delivered using the similar mechanisms: fake Adobe PDFs, fake Canva Setup, etc.
malwrhunterteam's profile picture. Official MHT Twitter account. Check out ID Ransomware (created by @demonslay335). More photos & gifs, less malware.
MalwareHunterTeam
@malwrhunterteam
15 de dez. de

"CÔNG TY TNHH XB FLOW TECHNOLOGIES" (Sectigo given cert) signed "screen_video_iphone.mp4 Drive\.google.com" / "Facebook_Video20251122.mp4 Facebook\.com" sample, seen from Poland: 88bcc4eacf3c0dd26c57dfdd42da085eeff0bcc4c1106eceeba466c0a05fc1e5 🤷‍♂️

malwrhunterteam's tweet image. "CÔNG TY TNHH XB FLOW TECHNOLOGIES" (Sectigo given cert) signed "screen_video_iphone.mp4 Drive\.google.com" / "Facebook_Video20251122.mp4 Facebook\.com" sample, seen from Poland: 88bcc4eacf3c0dd26c57dfdd42da085eeff0bcc4c1106eceeba466c0a05fc1e5 🤷‍♂️
1
2
6
1
4K
0
5
20
5
5K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
13 de dez. de

CertCentral is now TheCertGraveyard[.]org & CertGraveyard[.]org. The CertCentral API returns an error directing to use the new domains. Please give me a like or a share to get the word out. Also use the site to report and investigate certificates used to sign malware. :)

SquiblydooBlog's profile picture. Malware Analysis Creator of Debloat, certReport, and https://t.co/hEJGt0jzIq Want to chat? Join the Debloat discord: https://t.co/ZcWIqa6ZA9
Squiblydoo
 @SquiblydooBlog
12 de dez. de

I'm being required to give up the domain CertCentral[.]org; and the change has to happen by Monday. I'm noodling on alternative names. Keep an eye out for the change.

13
5
24
2
18K
5
47
80
7
17K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
12 de dez. de

I'm being required to give up the domain CertCentral[.]org; and the change has to happen by Monday. I'm noodling on alternative names. Keep an eye out for the change.

13
5
24
2
18K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
12 de dez. de

Malware signed "JAMES BARRIERE FOUNDATION FOR THE UNDERPRIVILEGED" 8cb3a5a1a3ae192018049dcbf37f58678e0c21323f9ddd7e1201d695d1b1826b C2: 188.137.248.240 Uses same encoding scheme as quoted tweet below

SquiblydooBlog's profile picture. Malware Analysis Creator of Debloat, certReport, and https://t.co/hEJGt0jzIq Want to chat? Join the Debloat discord: https://t.co/ZcWIqa6ZA9
Squiblydoo
 @SquiblydooBlog
29 de nov. de

Malware uses a custom captcha to prevent execution C2: 85.192.49.248 The maldev is a 1-trick pony... the http can get decoded with the following recipe to decode the c2 communication: From base64, reverse, from base64, fork, from base64, reverse, from base64 🤠

SquiblydooBlog's tweet image. Malware uses a custom captcha to prevent execution C2: 85.192.49.248 The maldev is a 1-trick pony... the http can get decoded with the following recipe to decode the c2 communication: From base64, reverse, from base64, fork, from base64, reverse, from base64 🤠
SquiblydooBlog's tweet image. Malware uses a custom captcha to prevent execution C2: 85.192.49.248 The maldev is a 1-trick pony... the http can get decoded with the following recipe to decode the c2 communication: From base64, reverse, from base64, fork, from base64, reverse, from base64 🤠
0
12
66
25
8K
1
4
28
9
2K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
12 de dez. de

ParallaxRAT, signed by ALL-TECH LLC, being delivered disguised as a legal notice; see MHT's thread for legal notice and indicators👇

malwrhunterteam's profile picture. Official MHT Twitter account. Check out ID Ransomware (created by @demonslay335). More photos & gifs, less malware.
MalwareHunterTeam
@malwrhunterteam
12 de dez. de

"ALL-TECH LLC" (SSL Corp given cert) signed "Separation Documentation.scr" sample, seen from France: 3348dbfa371efc25187b13641718fc93faafbc41571cc480b99ecbd54091e4c6 service-template0000[.]dad 69.67.172[.]7 🤷‍♂️

malwrhunterteam's tweet image. "ALL-TECH LLC" (SSL Corp given cert) signed "Separation Documentation.scr" sample, seen from France: 3348dbfa371efc25187b13641718fc93faafbc41571cc480b99ecbd54091e4c6 service-template0000[.]dad 69.67.172[.]7 🤷‍♂️
2
1
9
2
4K
0
6
26
5
2K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
9 de dez. de

This appears to be a key compromise. Lydsec creates Keypasco, a MFA handling solution for enterprise and mobile. The stolen key (not EV, no hardware token) was used to sign CobaltStrike. Its not known how or who acquired the key, or what other damage was done.

malwrhunterteam's profile picture. Official MHT Twitter account. Check out ID Ransomware (created by @demonslay335). More photos & gifs, less malware.
MalwareHunterTeam
@malwrhunterteam
8 de dez. de

"LYDSEC DIGITAL TECHNOLOGY CO., LTD." (Sectigo given cert) signed "RStone.exe" sample, seen from Taiwan: 4376f6c5bd63c9472dc1575b26f70cc2320682a47881e1a9283904bcdec43fd8 www.msupdate[.]online Cobalt... 🤷‍♂️ @1ZRR4H

malwrhunterteam's tweet image. "LYDSEC DIGITAL TECHNOLOGY CO., LTD." (Sectigo given cert) signed "RStone.exe" sample, seen from Taiwan: 4376f6c5bd63c9472dc1575b26f70cc2320682a47881e1a9283904bcdec43fd8 www.msupdate[.]online Cobalt... 🤷‍♂️ @1ZRR4H
malwrhunterteam's tweet image. "LYDSEC DIGITAL TECHNOLOGY CO., LTD." (Sectigo given cert) signed "RStone.exe" sample, seen from Taiwan: 4376f6c5bd63c9472dc1575b26f70cc2320682a47881e1a9283904bcdec43fd8 www.msupdate[.]online Cobalt... 🤷‍♂️ @1ZRR4H
malwrhunterteam's tweet image. "LYDSEC DIGITAL TECHNOLOGY CO., LTD." (Sectigo given cert) signed "RStone.exe" sample, seen from Taiwan: 4376f6c5bd63c9472dc1575b26f70cc2320682a47881e1a9283904bcdec43fd8 www.msupdate[.]online Cobalt... 🤷‍♂️ @1ZRR4H
malwrhunterteam's tweet image. "LYDSEC DIGITAL TECHNOLOGY CO., LTD." (Sectigo given cert) signed "RStone.exe" sample, seen from Taiwan: 4376f6c5bd63c9472dc1575b26f70cc2320682a47881e1a9283904bcdec43fd8 www.msupdate[.]online Cobalt... 🤷‍♂️ @1ZRR4H
1
7
15
3
7K
0
3
11
5
6K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
9 de dez. de

Per Loader Insight Agency, this file is being dropped by Amadey: 18844d402ccdfcc6a1e7f5104ace53b62c517ac2f904dd75393fc1db0dc5af6a from 178.16.55.189 Signed "Taiyuan Banmin Trading Co., Ltd." 4 day old cert. Loads the legitimate VirtualHere for remote access to USB devices.

0
3
14
1
1K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
7 de dez. de

Pretends to be a ChatGPT installer. Launches ChatGPT in a browser as it sets a scheduled task to execute "gpt-ai.dll" hourly. Not completely sure what it is, but looks remarkably similar to a fake Notepad++ installer that MHT also tweeted about 9acbb1d7bdea949c3dc0014c00cbdf29

SquiblydooBlog's tweet image. Pretends to be a ChatGPT installer. Launches ChatGPT in a browser as it sets a scheduled task to execute "gpt-ai.dll" hourly. Not completely sure what it is, but looks remarkably similar to a fake Notepad++ installer that MHT also tweeted about 9acbb1d7bdea949c3dc0014c00cbdf29
SquiblydooBlog's tweet image. Pretends to be a ChatGPT installer. Launches ChatGPT in a browser as it sets a scheduled task to execute "gpt-ai.dll" hourly. Not completely sure what it is, but looks remarkably similar to a fake Notepad++ installer that MHT also tweeted about 9acbb1d7bdea949c3dc0014c00cbdf29
SquiblydooBlog's tweet image. Pretends to be a ChatGPT installer. Launches ChatGPT in a browser as it sets a scheduled task to execute "gpt-ai.dll" hourly. Not completely sure what it is, but looks remarkably similar to a fake Notepad++ installer that MHT also tweeted about 9acbb1d7bdea949c3dc0014c00cbdf29
malwrhunterteam's profile picture. Official MHT Twitter account. Check out ID Ransomware (created by @demonslay335). More photos & gifs, less malware.
MalwareHunterTeam
@malwrhunterteam
5 de dez. de

"Taiyuan Jiankang Technology Co., Ltd." (GlobalSign given cert) signed "Setup.msi" sample: b89bef3b118ba3fb9261962eaee144525ee4c5a109f5817d9172cb6e67129b42 🤷‍♂️

malwrhunterteam's tweet image. "Taiyuan Jiankang Technology Co., Ltd." (GlobalSign given cert) signed "Setup.msi" sample: b89bef3b118ba3fb9261962eaee144525ee4c5a109f5817d9172cb6e67129b42 🤷‍♂️
1
0
8
1
8K
2
12
49
15
10K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
4 de dez. de

The RuralTechFund is one project I love supporting each year. The fund helps students access tech and consider it as a career. In addition to an amazing cause, Chris also makes it fun and adds incentive with his contest. Check it out: ruraltechfund[.]org/goldenticket/

chrissanders88's profile picture. Ed.D. | Founder @networkdefense @RuralTechFund | Former @Mandiant, DoD | Author: Intrusion Detection Honeypots, Practical Packet Analysis, Applied NSM
Chris Sanders 🔎 🧠
@chrissanders88
3 de dez. de

My friends, the time has come. This holiday season, I'm giving away a golden ticket that grants free entry into ALL my training courses, a year's worth of chocolate, and tons of other amazing prizes.

chrissanders88's tweet image. My friends, the time has come. This holiday season, I'm giving away a golden ticket that grants free entry into ALL my training courses, a year's worth of chocolate, and tons of other amazing prizes.
2
3
17
1
4K
0
2
8
1
2K
SquiblydooBlog's profile picture.
Squiblydoo
 @SquiblydooBlog
3 de dez. de

CertCentral[.]org has 1,800 entries of code-signing certificates issued to cybercriminals. At the end of 2024, I had only documented 300. I combined my list with MalwareBazaar's to get 600. However, the project has just snowballed since then, with no sign of slowing down.

SquiblydooBlog's tweet image. CertCentral[.]org has 1,800 entries of code-signing certificates issued to cybercriminals. At the end of 2024, I had only documented 300. I combined my list with MalwareBazaar's to get 600. However, the project has just snowballed since then, with no sign of slowing down.
3
15
62
12
4K
cyb3rops's profile picture. Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim

Florian Roth ⚡️

@cyb3rops
Max_Mal_'s profile picture. Threat Researcher, Blue Team, DFIR, Malware Analysis, and Reverse Engineering. “⚔️What do we say to God of malware, Not today⚔️”

Max_Malyutin

@Max_Mal_
BushidoToken's profile picture. Senior Threat Intel Advisor @TeamCymru | Co-founder @CuratedIntel | Co-author @SANSForensics FOR589 | Co-founder @BSidesBournemth | @darknetdiaries #126: REvil

Will

@BushidoToken
Kostastsale's profile picture. Running 🌐 https://t.co/UQFpAAKWqT | https://t.co/r3JIuCgmzV | https://t.co/THlTmUeVZI | https://t.co/m7NkZEP5ae | 🇬🇷🇨🇦

Kostas

@Kostastsale
James_inthe_box's profile picture.

James

@James_inthe_box
_JohnHammond's profile picture. Cybersecurity Researcher @HuntressLabs || Just Hacking Training @JustHackingHQ w/ @ethicalhacker || https://t.co/UtsNJiyiEk || https://t.co/narO3syzIy

John Hammond

@_JohnHammond
1ZRR4H's profile picture. 🏴‍☠️ OFFENSIVE-INTEL 🏴‍☠️ Cyber Threat Intelligence by Hackers | Security Researcher en https://t.co/rDrSxZASB3 | @CuratedIntel Member | 🥷🧠🇨🇱

Germán Fernández

@1ZRR4H
c3rb3ru5d3d53c's profile picture. 💕 Malware Hunter Killer 💕 #binlex & #mwcfg Developer 📽️ YouTuber 👩‍💻 She/Her 💍@DravenSwiftbow Support my work 👇 ☕️ https://t.co/NoM1TXq00P

ςεяβεяμs - мαℓωαяε яεsεαяςнεя

@c3rb3ru5d3d53c
JAMESWT_WT's profile picture. #Independent #Malware #Hunter #CyberSecurity #InfoSec https://t.co/KCFBJcHHcW https://t.co/WODUKncjFy

JAMESWT

@JAMESWT_WT
Gi7w0rm's profile picture. Threat Intelligence Analyst | See my Linktree for other socials | In case I post false intel, contact me! Support me: https://t.co/5WgDqr0K8p 🇪🇺🇩🇪🇺🇦🌈

Gi7w0rm

@Gi7w0rm
struppigel's profile picture. MalwareAnalysisForHedgehogs, Principal Malware Researcher at GDATA, he/him 🦔🌈🏳️‍⚧️

Karsten Hahn

@struppigel
UK_Daniel_Card's profile picture. Department of Cyber WAR. CEO of everyone's email servers! Member of the Counter Spider Collective. Wielder of AI to defend in Cyber Space.

mRr3b00t

@UK_Daniel_Card
likethecoins's profile picture. Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @likethecoins@infosec.exchange

Katie Nickels

@likethecoins
StopMalvertisin's profile picture. Security Researcher | Cyber Threat / Malware Analyst | Ex Sr. Threat Analyst @ Proofpoint | Founder of Stop Malvertising

Kimberly

@StopMalvertisin
0xToxin's profile picture. @msftsecurity | Chasing bad bois

Ne0ne | Igal

@0xToxin
executemalware's profile picture. #malware hunter & analyst. Opinions are my own.

ExecuteMalware

@executemalware
embee_research's profile picture. Security Researcher, Creating and Sharing Educational Content.

Matthew

@embee_research
HackingLZ's profile picture. CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars

Justin Elze

@HackingLZ
abuse_ch's profile picture. Fighting malware and botnets

abuse.ch

@abuse_ch
herrcore's profile picture. UnpacMe | OALABS

herrcore

@herrcore
RandoFlagg68088's profile picture.

RandoFlagg

@RandoFlagg68088
RyanTate88's profile picture.

Ryan Givings

@RyanTate88
davidalqabri's profile picture. Working on the difficult security/privacy partnership, gauging expectations/performance through the stormy sea of the digital almighty. Silenced by the silence

David Arroyo Guardeño

@davidalqabri
AndresMs2025's profile picture.

Andres Mendez

@AndresMs2025
jfayadm's profile picture. I’m an entrepreneur with a passion for transforming ideas into thriving businesses.

juliette fayad

@jfayadm
O1X1O1's profile picture. opsec is a myth. | threat actor | data broker | cyber security specialist | OSINT enthusiast

Xmr

@O1X1O1
LeSchuch's profile picture.

Schuch

@LeSchuch
K1enNT's profile picture.

Nguyễn Trung Kiên

@K1enNT
_josehelps's profile picture. 🛡️ Threat Research Director @Splunk ❤️ Scuba Diving 🔧 Maintainer of #AtomicRedTeam #LOLDRIVERS #LOLRMM #LOLBAS

Jose Enrique Hernandez

@_josehelps
vwielewski's profile picture. ind4.0, infosec, osint

Vinícius S.A.

@vwielewski
AKhaldey's profile picture. Artificial Intelligence | Cybersecurity | Digital Forensics

AHMAD AL-KHALDEY

@AKhaldey
SredniPat's profile picture.

Sredni Pat

@SredniPat
BabaYagaMW's profile picture.

BabaYaga

@BabaYagaMW
s4muii's profile picture. Reverse Engineer | Malware Analyst | CTF player@L3ak

Sameh Malak

@s4muii
shbeze's profile picture.

shbe

@shbeze
bibhansudas's profile picture. escape the matrix 🔯

Bibhansu Das

@bibhansudas
fsoc_'s profile picture.

phil

@fsoc_
Kamil1274302's profile picture. Keep shining, beautiful one. The world needs your light.

Rebecca

@Kamil1274302
teio1515599's profile picture.

teio

@teio1515599
justothercount's profile picture.

Another User

@justothercount
GHackrt's profile picture.

Gshs Hackrt

@GHackrt
Harjot06795477's profile picture.

Harjot

@Harjot06795477
luky5112's profile picture.

d0bed0b0

@luky5112
D4lj337's profile picture.

D4lj337

@D4lj337
Jutsu0xdfir_mal's profile picture. #ThreatHunting / #BlueTeam engineer. I'm just looking for traces in the logs. Reading and retweeting cool stuff.

0xdfir-jutsu-mal

@Jutsu0xdfir_mal
IamMaskedFox's profile picture. CTI/Hunter, ex Workday, ex BAH, Cisco Talos, but also interested in History, Meditation, science fiction, Philosophy, Psychology, Finance, I’m curious =)

Alex (APP)

@IamMaskedFox
m4ur4ud3r's profile picture.

Brandon Bridgewater

@m4ur4ud3r
Sekiro23456's profile picture.

Ghost23

@Sekiro23456
_d3d0x's profile picture.

_d3d0x

@_d3d0x
Aqib44137091's profile picture. Technology & Science Tech News Tech Influencers

Aqib

@Aqib44137091
chenzw95's profile picture.

Chen Zheng Wei

@chenzw95
dariushoule's profile picture. Hacker, builder, speaker, AppSec practitioner. Probable world championship player of the creative masterpiece: Lemmings (1991)

Darius Houle

@dariushoule
itsnouveauriche's profile picture.

Leo

@itsnouveauriche
MagnusMOD's profile picture.

Magnus Odling

@MagnusMOD
_subTee's profile picture. I like to read . Mostly read only mode here.

Casey

@_subTee
Yuri2pia's profile picture. Yuritopia！！！

SirahaneSuou

@Yuri2pia
PouickVert's profile picture. Ne me suivez pas. Je suis toujours dans la mauvaise file.

PouickPouick

@PouickVert
BogeyBackdoor's profile picture. Building a Team of Spies and Bank Robbers. VGhlIEFuYWx5c3QgZm9ybWVybHkga25vd24gYXMgWW9zaGk=

BogeyBackdoor

@BogeyBackdoor
Act1ve_On_Cloud's profile picture. professional twitter user | 🇺🇸🇺🇦🇹🇼 | cybersecurity by day, sleeping by night. I delete reposts/comments semi-often, posts aren’t deleted

Act1ve

@Act1ve_On_Cloud
sh3llGhost's profile picture. Bug Bounty Hunter & Cybersecurity Researcher & Developer Just a Chill guy👌

shell_Ghost

@sh3llGhost
AmitmahatoAmit's profile picture. Darren Li

Alexa Paoli ( .% )

@AmitmahatoAmit
ProgrammerVBSQL's profile picture.

Víctor M. J. Villa

@ProgrammerVBSQL
taktik100x's profile picture. ✧small caps and #bitcoin since 2017 ✧cybersecurity/ai/depin/compute research

taktik

@taktik100x
ttsspptt's profile picture.

TS stan

@ttsspptt
Avalo0nn's profile picture. リュ リュ リュ リュ リュ

Zyntherion Noctivale

@Avalo0nn
AngelaHart89938's profile picture.

Angela Hartman

@AngelaHart89938
g1adioo's profile picture. nobody

Gladio

@g1adioo
santo_sec1's profile picture. Opinions are my own and not my employer's

Santi Gama

@santo_sec1
snotra_uk's profile picture. Penetration Tester | 6 Year Carnivore | Bitcoiner | Lifter of Heavy Things npub13zd3n66ra7vwxhzeue2mt3nacydeqegt4dk3ggwswkh0hl69julstknn9w

Shaun

@snotra_uk
frenietz's profile picture. Human being.

Frenietz

@frenietz
pr0xylife's profile picture. DFIR | Malware Hunter | @Cryptolaemus1

proxylife

@pr0xylife
BushidoToken's profile picture. Senior Threat Intel Advisor @TeamCymru | Co-founder @CuratedIntel | Co-author @SANSForensics FOR589 | Co-founder @BSidesBournemth | @darknetdiaries #126: REvil

Will

@BushidoToken
Kostastsale's profile picture. Running 🌐 https://t.co/UQFpAAKWqT | https://t.co/r3JIuCgmzV | https://t.co/THlTmUeVZI | https://t.co/m7NkZEP5ae | 🇬🇷🇨🇦

Kostas

@Kostastsale
James_inthe_box's profile picture.

James

@James_inthe_box
_JohnHammond's profile picture. Cybersecurity Researcher @HuntressLabs || Just Hacking Training @JustHackingHQ w/ @ethicalhacker || https://t.co/UtsNJiyiEk || https://t.co/narO3syzIy

John Hammond

@_JohnHammond
1ZRR4H's profile picture. 🏴‍☠️ OFFENSIVE-INTEL 🏴‍☠️ Cyber Threat Intelligence by Hackers | Security Researcher en https://t.co/rDrSxZASB3 | @CuratedIntel Member | 🥷🧠🇨🇱

Germán Fernández

@1ZRR4H
c3rb3ru5d3d53c's profile picture. 💕 Malware Hunter Killer 💕 #binlex & #mwcfg Developer 📽️ YouTuber 👩‍💻 She/Her 💍@DravenSwiftbow Support my work 👇 ☕️ https://t.co/NoM1TXq00P

ςεяβεяμs - мαℓωαяε яεsεαяςнεя

@c3rb3ru5d3d53c
JAMESWT_WT's profile picture. #Independent #Malware #Hunter #CyberSecurity #InfoSec https://t.co/KCFBJcHHcW https://t.co/WODUKncjFy

JAMESWT

@JAMESWT_WT
Gi7w0rm's profile picture. Threat Intelligence Analyst | See my Linktree for other socials | In case I post false intel, contact me! Support me: https://t.co/5WgDqr0K8p 🇪🇺🇩🇪🇺🇦🌈

Gi7w0rm

@Gi7w0rm
struppigel's profile picture. MalwareAnalysisForHedgehogs, Principal Malware Researcher at GDATA, he/him 🦔🌈🏳️‍⚧️

Karsten Hahn

@struppigel
TheDFIRReport's profile picture. Real Intrusions by Real Attackers, the Truth Behind the Intrusion.

The DFIR Report

@TheDFIRReport
likethecoins's profile picture. Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @likethecoins@infosec.exchange

Katie Nickels

@likethecoins
0xToxin's profile picture. @msftsecurity | Chasing bad bois

Ne0ne | Igal

@0xToxin
executemalware's profile picture. #malware hunter & analyst. Opinions are my own.

ExecuteMalware

@executemalware
embee_research's profile picture. Security Researcher, Creating and Sharing Educational Content.

Matthew

@embee_research
vinopaljiri's profile picture. Threat Researcher at Check Point @_CPResearch_ #DFIR #Reversing - All opinions expressed here are mine only. https://t.co/iWvwWF1AnN

Jiří Vinopal

@vinopaljiri
abuse_ch's profile picture. Fighting malware and botnets

abuse.ch

@abuse_ch
herrcore's profile picture. UnpacMe | OALABS

herrcore

@herrcore
BleepinComputer's profile picture. Breaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!

BleepingComputer

@BleepinComputer
ViriBack's profile picture. #Malware C2 hunter #infosec passionate. Tweets are my own.

Dee

@ViriBack
M_haggis's profile picture. Threat Researcher | Co-Host of Atomics on a Friday | LOLDrivers & Atomic Red Team Maintainer | I'm Everywhere and Nowhere - BSG.

The Haag™

@M_haggis
_josehelps's profile picture. 🛡️ Threat Research Director @Splunk ❤️ Scuba Diving 🔧 Maintainer of #AtomicRedTeam #LOLDRIVERS #LOLRMM #LOLBAS

Jose Enrique Hernandez

@_josehelps
0x_b0mb3r's profile picture. i like malware that goes beep boop

b0mb3r

@0x_b0mb3r
vigilantbeluga's profile picture. Anti-malware vigilante in Korea, Republic Of

Anti-malware vigilante

@vigilantbeluga
MalasadaTech's profile picture. ALOJAHZ WORLD! HOBBYIST THRUNTELLISEARCHER. VIEWS ARE MY OWN! 808 https://t.co/5AFyJj7uay

MalasadaTech

@MalasadaTech
wbmmfq's profile picture. Senior Security Operations Analyst @HuntressLabs | @tanner@infosec.exchange | Views my own, obv.

Tanner

@wbmmfq
g0njxa's profile picture. ChatGPT says I'm a cyber researcher :) | donate 💸 to g0njxa.eth 💖 | Bad student, enthusiast, defo not an expert DMs are open, feel free to reach! 😼☂️🟣

Who said what?

@g0njxa
PRODAFT's profile picture. Proactive Defense Against Future Threats | Pioneering #CyberSec and #ThreatIntelligence in Europe & MENA since ’12. CTI Platform: #USTA Risk Intel: #BLINDSPOT

PRODAFT

@PRODAFT
naumovax's profile picture. pt malicious network traffic researcher, speaker / this blog about new malware & interesting С2 communication & my work life

Kseniia \n

@naumovax
TomHegel's profile picture. Hunting nation-state threats & bending intelligence tech to shape real-world outcomes. @SentinelOne / @ValidinLLC / Stealth

Tom Hegel

@TomHegel
k3yp0d's profile picture. https://t.co/KdcAuk7di9

Simon Kenin

@k3yp0d
SecurityAura's profile picture. GCIH, GCFE, GDAT | DFIR, TH, DE | @CuratedIntel DFIR https://t.co/BMWUwziTLh https://t.co/MmX2YNVqdk https://t.co/R20zseQfLk

Aura

@SecurityAura
angealbertini's profile picture. Reverse engineer, file formats expert. Corkami, CPS2Shock, PoC||GTFO, Sha1tered, Magika... Security engineer @ Google. He/him.

Ange

@angealbertini
tuckner's profile picture. Finding bad software extensions at https://t.co/dhLUjMRP1I

tuckner

@tuckner
nazywam's profile picture. 301 @nazywam.bsky.social //Security research at @CERT_Polska_en

Nazywam

@nazywam
DougMadory's profile picture. Director of Internet Analysis at @Kentikinc. Alum of @dynresearch @renesys @uva @dartmouth @usairforce

Doug Madory (also on Bluesky)

@DougMadory
RacWatchin8872's profile picture. Threat Intelligence. My Opinions Thanks @silentpush, @censysio, @ValidinLLC, @anyrun_app for making my research easier.

WatchingRac

@RacWatchin8872
ShanHolo's profile picture. Another blue team member…..#CSIRT #DFIR #Malware #4n6 #ThreatIntel and following the white rabbit...

Shanholo

@ShanHolo
CISACyber's profile picture. Part of @CISAgov, we respond to major incidents, analyze threats, and exchange critical cybersecurity information with partners around the world.

CISA Cyber

@CISACyber
a_greenberg's profile picture. WIRED writer, author of SANDWORM and now TRACERS IN THE DARK: The Global Hunt for the Crime Lords of Cryptocurrency. Andy.01 on Signal. agreenberg@wired.com

Andy Greenberg (@agreenberg at the other places)

@a_greenberg
JustHackingHQ's profile picture. With "Focused Technical Training for All Levels", JHT has 4 types of hands-on, affordable options by All-Star experts like @_JohnHammond, et al. https://t.co/lyeW4QnALE

Just Hacking Training (JHT)

@JustHackingHQ
404mediaco's profile picture. a journalist-founded tech outlet here to fuck up the internet.

404 Media

@404mediaco
DarthPutinKGB's profile picture. Czar for life of all Russians. Master Strategist. Tea connoisseur. Window installer. Author. YouTuber. Wanted in 123 countries. Parody, apparently.

Darth Putin

@DarthPutinKGB
nextronresearch's profile picture. Nextron Systems Threat Research Team research (att) https://t.co/QTt2X62dXP

Nextron Research ⚡️

@nextronresearch
sekoia_io's profile picture. A #SOCplatform boosted by #AI and #threatintelligence, combining #SIEM, #SOAR, #Automation in a single solution. Used by End-users, MSSP and APIs

Sekoia.io

@sekoia_io
evilsocket's profile picture. Music, cybersecurity, open source and AI • Author of bettercap, pwnagotchi, opensnitch, bleah, legba and a few other things.

Simone Margaritelli

@evilsocket
watchtowrcyber's profile picture. watchTowr enables organizations to get ahead of in-the-wild exploitation with Preemptive Exposure Management technology.

watchTowr

@watchtowrcyber
johnk3r's profile picture. Threat Hunter

Johnk3r

@johnk3r
JohnHultquist's profile picture. Chief Analyst, Google Threat Intelligence Group. @CYBERWARCON and @SLEUTHCON founder. Johns Hopkins professor. Army vet.

John Hultquist

@JohnHultquist
pe4Chscreeching's profile picture. UK Security Operations Analyst at @HuntressLabs

Ame

@pe4Chscreeching
_mattata's profile picture. Dad, Vulnerability Research, Packet connoisseur. He/Him. Cyber Security Architect @GreyNoiseIO, DM's open. Top percentage Rattata. #cve #infosec #cybersecurity

remy🐀

@_mattata
jaydinbas's profile picture. Reverse engineering, malware

Johann Aydinbas

@jaydinbas
SecureReload's profile picture. Wannabe Security Researcher | I do random projects every now and then | #InfoSec | contact@securereload.tech

Ryan Ashley

@SecureReload
MsftSecIntel's profile picture. We are Microsoft's global network of security experts. Follow for security research and threat intelligence.

Microsoft Threat Intelligence

@MsftSecIntel
josephfcox's profile picture. Hacking/crime/privacy journalist. Author of DARK WIRE. Co-founder of @404mediaco. Signal: joseph.404 Email: joseph@404media.co

Joseph Cox

@josephfcox
Cryptolaemus1's profile picture. Where are mealybugs now!?! We is hungry and no one wants to play anymore. Where everyone at?

Cryptolaemus

@Cryptolaemus1
cglyer's profile picture. Microsoft Threat Intelligence Center - Former Incident Responder & Chief Security Architect @Mandiant

Christopher Glyer

@cglyer
washi_dev's profile picture. Developer - Reverse Engineer - CTF player - Scrub. 🔧 I develop #AsmResolver, ✍️ blog at https://t.co/2WDyyrf4Rc, and sometimes 👾 hack with @Shellphish

Washi

@washi_dev
NathanMcNulty's profile picture. Loves Jesus, loves others | Husband, father of 4, security solutions architect, love to learn and teach | Microsoft MVP | @TribeOfHackers | 🦋@nathanmcnulty.com

Nathan McNulty

@NathanMcNulty
Gootloader's profile picture. Security researcher dedicated to pissing off the Gootloader Threat Actor. Tox Chat: 5E7FB4CA0D59F48504AEC72907D64D71D22A00C023E584276F91DB26C924ED64C6D7F19348D2

Gootloader

@Gootloader
techieStef's profile picture. Senior Intelligence Analyst @RedCanary! Former DFIR @Mandiant, former @NetworkDefense intern. Psychology nerd. When I am not computering, I go outside and play!

Stef Rand

@techieStef
virusbtn's profile picture. Security information portal, testing and certification body. Organisers of the annual Virus Bulletin conference. @VirusBulletin@infosec.exchange

Virus Bulletin

@virusbtn
captainGeech42's profile picture. cybercrime connoisseur and synapse fanboy | hax @OSUSEC | tweets my own | @captainGeech@infosec.exchange

geech 👽👾

@captainGeech42
bryceabdo's profile picture. 🐗 🦅 🎯 Research & Discovery @ Google/Mandiant

Bryce

@bryceabdo

United States Tendências

Talvez você curta

Something went wrong.


Something went wrong.