日本語
English Indonesia Türkçe Deutsch Español Português Pусский Français Italiano Nederlands Polski العربية ไทย Tiếng Việt 繁體中文 简体中文 日本語 한국어
grep_security's profile picture. threat research • threat Intelligence • cloud security• supplychain security & random | Director of security research @Loginsoft_Inc - Opinions are my own

Hari Charan

@grep_security

threat research • threat Intelligence • cloud security• supplychain security & random | Director of security research @Loginsoft_Inc - Opinions are my own

4Kポスト 554フォロワー 142フォロー中
おすすめツイート
固定されたツイート
grep_security's profile picture.
Hari Charan
 @grep_security
2023/04/25

Here I created a quick map of resources if you're interested in hunting/tracking malware & actors. You learn different techniques employed by researchers in our community. app.mural.co/invitation/mur… If you don't want to signup for Mural, try this link drive.proton.me/urls/9CGXECVWC…

1
8
42
24
6千
Hari Charan さんがリポスト
Loginsoft_Inc's profile picture.
Loginsoft
@Loginsoft_Inc
2024/01/23

The latest Vulnerability Intelligence Report by Loginsoft reveals crucial trends in ransomware activities for the Year 2023. loginsoft.com/blogs/vulnerab… #ThreatIntelligence #Ransomware #VulnerabilityManagement #RiskManagement #InfoSec #VulnerabilityIntelligence

Loginsoft_Inc's tweet image. The latest Vulnerability Intelligence Report by Loginsoft reveals crucial trends in ransomware activities for the Year 2023. loginsoft.com/blogs/vulnerab… #ThreatIntelligence #Ransomware #VulnerabilityManagement #RiskManagement #InfoSec #VulnerabilityIntelligence
0
2
4
0
336
Hari Charan さんがリポスト
TheHackersNews's profile picture.
The Hacker News
 @TheHackersNews
2023/08/10

Researchers uncover Statc Stealer, a dangerous #malware targeting Windows devices. It steals login data, cookies, #cryptocurency wallets, and sensitive information. Find out more in this: thehackernews.com/2023/08/new-st… #cybersecurity #hacking #datasecurity

TheHackersNews's tweet card. Researchers uncover Statc Stealer, a dangerous malware targeting Windows devices. It steals login data, cookies, crypto wallets.
New Statc Stealer Malware Emerges: Your Sensitive Data at Risk
ソース: thehackernews.com
1
62
83
5
21千
Hari Charan さんがリポスト
TheHackersNews's profile picture.
The Hacker News
 @TheHackersNews
2023/08/04

🚨 A Russian nation-state actor, Turla, strikes again with the powerful DeliveryCheck backdoor. Learn how it breaches #Microsoft Exchange servers and exfiltrates sensitive messages from Signal app. Read more 👉 thehackernews.com/2023/07/turlas… #cybersecurity

TheHackersNews's tweet card. A new cyber threat named DeliveryCheck has targeted the defense sector in Ukraine and Eastern Europe. DeliveryCheck spreads through malicious macros.
Turla's New DeliveryCheck Backdoor Breaches Ukrainian Defense Sector
ソース: thehackernews.com
4
79
142
21
39千
Hari Charan さんがリポスト
MsftSecIntel's profile picture.
Microsoft Threat Intelligence
@MsftSecIntel
2023/08/02

Microsoft has identified highly targeted social engineering attacks by the threat actor Midnight Blizzard (previously NOBELIUM) using credential theft phishing lures sent as Microsoft Teams chats. Get detailed analysis, IOCs, and recommendations: msft.it/60199EEkv

11
235
481
98
147千
Hari Charan さんがリポスト
TheDFIRReport's profile picture.
The DFIR Report
 @TheDFIRReport
2023/08/01

In May, we observed a threat actor (TA) exploit PaperCut NG (CVE-2023-27350) to download/execute a Havoc C2 binary. ➡️The TA then reviewed tasklist before dumping credentials using Mimikatz. ➡️Next, the TA downloaded numerous RMM tools. thedfirreport.com/services/ #AllIntel 1/X

TheDFIRReport's tweet image. In May, we observed a threat actor (TA) exploit PaperCut NG (CVE-2023-27350) to download/execute a Havoc C2 binary. ➡️The TA then reviewed tasklist before dumping credentials using Mimikatz. ➡️Next, the TA downloaded numerous RMM tools. thedfirreport.com/services/ #AllIntel 1/X
TheDFIRReport's tweet image. In May, we observed a threat actor (TA) exploit PaperCut NG (CVE-2023-27350) to download/execute a Havoc C2 binary. ➡️The TA then reviewed tasklist before dumping credentials using Mimikatz. ➡️Next, the TA downloaded numerous RMM tools. thedfirreport.com/services/ #AllIntel 1/X
TheDFIRReport's tweet image. In May, we observed a threat actor (TA) exploit PaperCut NG (CVE-2023-27350) to download/execute a Havoc C2 binary. ➡️The TA then reviewed tasklist before dumping credentials using Mimikatz. ➡️Next, the TA downloaded numerous RMM tools. thedfirreport.com/services/ #AllIntel 1/X
TheDFIRReport's tweet image. In May, we observed a threat actor (TA) exploit PaperCut NG (CVE-2023-27350) to download/execute a Havoc C2 binary. ➡️The TA then reviewed tasklist before dumping credentials using Mimikatz. ➡️Next, the TA downloaded numerous RMM tools. thedfirreport.com/services/ #AllIntel 1/X
3
64
159
41
40千
Hari Charan さんがリポスト
SophosXOps's profile picture.
Sophos X-Ops
 @SophosXOps
2023/07/28

Under investigation: During a hunt for DLL sideloading abuse of vmnat.exe, Sophos X-Ops uncovered a campaign targeting an organization in Southeast Asia. Aligning with TTPs previously attributed to the Mustang Panda threat group, we unraveled a complex, sustained intrusion. 1/10

4
75
192
69
57千
Hari Charan さんがリポスト
TheHackersNews's profile picture.
The Hacker News
 @TheHackersNews
2023/07/25

North Korean state actors linked to the RGB have been identified in the JumpCloud hack! An #OPSEC mistake exposed their IP address. Find details here: thehackernews.com/2023/07/north-… The new report also uncovers the use of malicious Ruby scripts and payloads like FULLHOUSE.DOORED,…

TheHackersNews's tweet card. North Korean state actors linked to the RGB have been identified in the JumpCloud hack! An OPSEC mistake exposed their IP address.
North Korean Nation-State Actors Exposed in JumpCloud Hack After OPSEC Blunder
ソース: thehackernews.com
0
41
85
14
24千
Hari Charan さんがリポスト
TheHackersNews's profile picture.
The Hacker News
 @TheHackersNews
2023/07/25

AVrecon, a stealthy SOHO router botnet, has silently grown for over 2 years! Over 70,000 routers infected, spanning 20 countries. Find details here: thehackernews.com/2023/07/new-so… #cybersecurity #informationsecurity #hacking

TheHackersNews's tweet card. Alert! A new malware strain called AVrecon has quietly targeted over 70,000 small office/home office (SOHO) routers worldwide.
New SOHO Router Botnet AVrecon Spreads to 70,000 Devices Across 20 Countries
ソース: thehackernews.com
0
35
49
4
21千
Hari Charan さんがリポスト
1ZRR4H's profile picture.
Germán Fernández
@1ZRR4H
2023/07/23

Citrix Gateway VPN compromised via CVE-2023-3519 (a critical unauthenticated RCE) shows evidence of exploitation on 7th July, 11 days before the official patch. The attackers exfiltrated the system configuration file to then probably use the Metasploit module called…

1ZRR4H's tweet image. Citrix Gateway VPN compromised via CVE-2023-3519 (a critical unauthenticated RCE) shows evidence of exploitation on 7th July, 11 days before the official patch. The attackers exfiltrated the system configuration file to then probably use the Metasploit module called…
1ZRR4H's tweet image. Citrix Gateway VPN compromised via CVE-2023-3519 (a critical unauthenticated RCE) shows evidence of exploitation on 7th July, 11 days before the official patch. The attackers exfiltrated the system configuration file to then probably use the Metasploit module called…
1ZRR4H's tweet image. Citrix Gateway VPN compromised via CVE-2023-3519 (a critical unauthenticated RCE) shows evidence of exploitation on 7th July, 11 days before the official patch. The attackers exfiltrated the system configuration file to then probably use the Metasploit module called…
1ZRR4H's tweet image. Citrix Gateway VPN compromised via CVE-2023-3519 (a critical unauthenticated RCE) shows evidence of exploitation on 7th July, 11 days before the official patch. The attackers exfiltrated the system configuration file to then probably use the Metasploit module called…
9
228
592
174
139千
Hari Charan さんがリポスト
TheHackersNews's profile picture.
The Hacker News
 @TheHackersNews
2023/07/24

⚠️ Researchers uncover first-ever open-source software supply chain attacks targeting banks! 🏦 #Malware authors posed as employees, tricked users with preinstall scripts, and cleverly used Azure's CDN subdomains. Read details: thehackernews.com/2023/07/bankin… #cybersecurity

TheHackersNews's tweet card. Researchers uncover first-ever open-source software supply chain attacks targeting banks!
Banking Sector Targeted in Open-Source Software Supply Chain Attacks
ソース: thehackernews.com
0
45
96
16
29千
Hari Charan さんがリポスト
Kostastsale's profile picture.
Kostas
 @Kostastsale
2023/07/18

New blog post based on a recent intrusion I observed with #Ursnif as the initial infection! Topics include: ✅ Detection opportunities ✅ TAs clipboard data ✅ Post-exploitation and more! The artifacts for this case: buff.ly/3NYx49v The blog: buff.ly/44QCSJ0

5
75
193
45
34千
Hari Charan さんがリポスト
TheHackersNews's profile picture.
The Hacker News
 @TheHackersNews
2023/07/17

Cybercriminals are leveraging exploits for CVE-2021-40444 and CVE-2022-30190 to execute code through malicious Word files. Once opened, LokiBot #malware is downloaded, logging keystrokes, capturing screenshots, and stealing data. Read: thehackernews.com/2023/07/cyberc… #cyberattack

TheHackersNews's tweet card. Cybercriminals are leveraging exploits for CVE-2021-40444 and CVE-2022-30190 to execute code through malicious Word files.
Cybercriminals Exploit Microsoft Word Vulnerabilities to Deploy LokiBot Malware
ソース: thehackernews.com
1
61
89
11
29千
Hari Charan さんがリポスト
CISACyber's profile picture.
CISA Cyber
 @CISACyber
2023/07/06

🚨 ALERT: Increased #Truebot malware activity targets U.S. & Canada organizations. 🤝 Joint advisory by @CISAgov, @FBI, @CISecurity's MS-ISAC, & @cybercentre_ca reveals new variants exploiting #Netwrix Auditor vulnerability. 🔗 cisa.gov/news-events/cy… #Cybersecurity

CISACyber's tweet image. 🚨 ALERT: Increased #Truebot malware activity targets U.S. & Canada organizations. 🤝 Joint advisory by @CISAgov, @FBI, @CISecurity's MS-ISAC, & @cybercentre_ca reveals new variants exploiting #Netwrix Auditor vulnerability. 🔗 cisa.gov/news-events/cy… #Cybersecurity
4
76
119
9
31千
Hari Charan さんがリポスト
MsftSecIntel's profile picture.
Microsoft Threat Intelligence
@MsftSecIntel
2023/07/06

Microsoft Incident Response's investigation of a BlackByte 2.0 ransomware attack that progressed in less than five days highlights the importance of disrupting common attack patterns, stopping attacker activities that precede ransomware deployment: msft.it/6010gxvlQ

MsftSecIntel's tweet card. Microsoft IR investigation of a BlackByte 2.0 ransomware attack progressed thru full attack chain from initial access to impact in five days.
The five-day job: A BlackByte ransomware intrusion case study | Microsoft Security Blog
ソース: microsoft.com
7
170
375
106
56千
Hari Charan さんがリポスト
Enno_Insinuator's profile picture.
Enno Rey
 @Enno_Insinuator
2023/07/05

Very solid PhD thesis on DNS security: Everything in Its Right Place. Improving DNS resilience ris.utwente.nl/ws/portalfiles… [PDF]

Enno_Insinuator's tweet image. Very solid PhD thesis on DNS security: Everything in Its Right Place. Improving DNS resilience ris.utwente.nl/ws/portalfiles… [PDF]
Enno_Insinuator's tweet image. Very solid PhD thesis on DNS security: Everything in Its Right Place. Improving DNS resilience ris.utwente.nl/ws/portalfiles… [PDF]
2
189
585
361
61千
Hari Charan さんがリポスト
_CPResearch_'s profile picture.
Check Point Research
@_CPResearch_
2023/07/03

#SmugX campaign targeting European governmental organizations 🇪🇺 : ✉️ Utilizes HTML Smuggling to deliver PlugX payloads 🤖 Abuses RoboForm DLL search order hijacking 🏮 Ties to previously reported RedDelta\ MustangPanda campaigns Read More : research.checkpoint.com/2023/chinese-t…

_CPResearch_'s tweet card. Introduction In the last couple of months, Check Point Research (CPR) has been tracking the activity of a Chinese threat actor targeting Foreign Affairs ministries and embassies in Europe. Combined...
Chinese Threat Actors Targeting Europe in SmugX Campaign - Check Point Research
ソース: research.checkpoint.com
0
39
85
13
16千
Hari Charan さんがリポスト
TheHackersNews's profile picture.
The Hacker News
 @TheHackersNews
2023/06/26

A Japanese #cryptocurrency exchange fell victim to a recent cyberattack, deploying the stealthy JokerSpy backdoor on Apple #macOS. Find out how this sophisticated toolkit targets macOS machines: thehackernews.com/2023/06/japane… #cybersecurity #hacking

TheHackersNews's tweet card. A Japanese cryptocurrency exchange fell victim to a recent cyberattack, deploying the stealthy JokerSpy backdoor on Apple macOS.
Japanese Cryptocurrency Exchange Falls Victim to JokerSpy macOS Backdoor Attack
ソース: thehackernews.com
4
40
63
0
28千

United States トレンド

おすすめツイート

Something went wrong.


Something went wrong.