Sign in

Alex Delamotte

@alex.leetnoob.com
1.8K followers 442 following 365 posts

I’m just a girl who lives in Vegas & likes cloud malware, idk anymore.

PostsRepliesMedia
Alex Delamotte @alex.leetnoob.com · 15/05/2025
It’s conference & festival season—♪ the most wonderful time of the year ♪ …bc I get to send my most ludicrous graphic design requests to local print shops and see which are brave enough to deliver
010
Alex Delamotte @alex.leetnoob.com · 25/04/2025
Very excited to share that I’ll be presenting at @sleuthcon.bsky.social in June! Jim & I will share the backstory behind AkiraBot that didn’t make it into the blog—and what they’ve been up to since.
0113
Alex Delamotte @alex.leetnoob.com · 15/04/2025
Mood board while drafting my @sleuthcon.bsky.social CFP submission (thanks for the sweet challenge coin, Sleuthy Sleuthington!) 🐍
060
Alex Delamotte @alex.leetnoob.com · 21/01/2025
A friend made these, similar energy
020
Alex Delamotte @alex.leetnoob.com · 18/01/2025
I do that regularly! That may explain why everything feels better when I’m in Europe
110
Alex Delamotte @alex.leetnoob.com · 18/01/2025
I finally feel like the stars are aligning! And if they aren’t, I’ll move them myself. Someone’s gotta do it.
140
Alex Delamotte @alex.leetnoob.com · 17/01/2025
Everyone wants my data tho, hardly unique to the void
010
Alex Delamotte @alex.leetnoob.com · 17/01/2025
Lately, the call of the void is increasingly loud. And today, the void says to install Xiaohongshu for research purposes
110
Alex Delamotte @alex.leetnoob.com · 15/01/2025
Hell yea, wya?
010
Reposted by Alex Delamotte
cabal @cabal.cx · 14/01/2025
our network has raised hundreds of dollars to give firefighters the zyn they need to keep protecting LA from the fires. Thank you!!
1188
Alex Delamotte @alex.leetnoob.com · 11/01/2025
Apparently I’ll be last minute lobbyconning at Shmoo. Say hi if we should hang!
020
Alex Delamotte @alex.leetnoob.com · 28/12/2024
ADIB
0100
Alex Delamotte @alex.leetnoob.com · 21/12/2024
OMG! I should complain on social media more often. You are a lifesaver!!! TYSM The aggressive junk filtering and no new mail badges still sucks but huge quality of life improvement. ⭐️
010
Alex Delamotte @alex.leetnoob.com · 20/12/2024
Brutal. I haven’t had that issue, but that’s unacceptable. My problem is that messages are automatically sorted to the new categories and I don’t see them (bad UI decisions) and I also no longer get new message badges so I have no idea when messages arrive. Also everything goes to Junk now.
110
Alex Delamotte @alex.leetnoob.com · 20/12/2024
Oh hell no. Onboarding email sent to junk? I’d be done.
000
Alex Delamotte @alex.leetnoob.com · 20/12/2024
I would like to take a moment to reflect on how awful the updates to the iOS Apple Mail client have been. It’s practically unusable now and everything sent to junk is legitimate mail. Huge downgrade. Is it just me?
682
Alex Delamotte @alex.leetnoob.com · 15/12/2024
I hadn’t seen the cat one!! Love how it turned out
010
Reposted by Alex Delamotte
Winnona @winnona.bsky.social · 26/11/2024
CTI is the cause of my brainrot but I really cooked on this #salttyphoon #telecomhack
54817
Reposted by Alex Delamotte
aaron @aaron.cat.gf · 26/11/2024
super simple bluesky firehose with references gist.github.com/aaronsdevera...
gist.github.com
Very very very simplified Bsky go brrr
Very very very simplified Bsky go brrr. GitHub Gist: instantly share code, notes, and snippets.
033
Alex Delamotte @alex.leetnoob.com · 25/11/2024
The Aircrafts Comments signal sticker pack is having a moment
030
Alex Delamotte @alex.leetnoob.com · 23/11/2024
I need to look at the other LLM’s API key formatting to see if I can hunt for tools using them. I found Predator through a different hunting rule I made for malicious cloud tools—I started hunting for OpenAI API keys after I found Predator using one.
120
Alex Delamotte @alex.leetnoob.com · 23/11/2024
Good times in DC. WAG drag was a success! For our unofficial post @cyberwarcon.bsky.social WAGINT party, I LARPed as Pavel Durov’s WAG, Juli Vavilova. nypost.com/2024/08/26/w...
0100
Alex Delamotte @alex.leetnoob.com · 23/11/2024
International House of Bots? Sign me up
010
Alex Delamotte @alex.leetnoob.com · 23/11/2024
I’m surprised I haven’t seen more malicious tools using AI since Predator. I scrape VirusTotal for any scripts that contain an OpenAI API key. No other major finds yet.
120
Alex Delamotte @alex.leetnoob.com · 22/11/2024
We have those on the West Coast too! But far fewer spies
000
Alex Delamotte @alex.leetnoob.com · 22/11/2024
The In-N-Out Info-Ops patch from @cyberwarcon.bsky.social goes so hard!!! Kudos to whoever designed that—love to see West Coast representation at a DC con 😎
290
Alex Delamotte @alex.leetnoob.com · 22/11/2024
Who else is blowing off F1 for Cyberwarcon? F 👏 THEM 👏 CARS See all you real WAGs there!
090
Reposted by Alex Delamotte
Tom Hegel @hegel.bsky.social · 21/11/2024
🚨 New Research Drop: 🇰🇵 DPRK IT Workers | A Network of Active Front Companies and Their Links to China Summary: ⚪ Newly Disrupted Front Companies by USG ⚪ Impersonating US based software and tech orgs ⚪ Links to still-active front orgs, CN association Report: www.sentinelone.com/labs/dprk-it...
sentinelone.com
DPRK IT Workers | A Network of Active Front Companies and Their Links to China
SentinelLabs has identified multiple deceptive websites linked to businesses in China fronting for North Korea's fake IT workers scheme.
13723
Alex Delamotte @alex.leetnoob.com · 20/11/2024
Iirc there is a field in the skeet metadata for boolean “is_first_skeet”. When True, could tell feed to drop the post if you feel it’s too noisy. I don’t mind the intro posts, but tbh I haven’t had time to keep up with the feed in its entirety 😅
110
Alex Delamotte @alex.leetnoob.com · 19/11/2024
whoami pwd rm -rf ~/
100
Alex Delamotte @alex.leetnoob.com · 19/11/2024
I def agree. People and content suggested here are much better 🥂
110
Alex Delamotte @alex.leetnoob.com · 18/11/2024
They say a new Bluesky follower is born every minute 🦋
1160
Alex Delamotte @alex.leetnoob.com · 18/11/2024
Actually DarkReading started it. Love to see it! www.darkreading.com/cloud-securi...
darkreading.com
Cloud Ransomware Flexes Fresh Scripts Against Web Apps
Cloud service providers are getting better at protecting data, pushing adversaries to develop new cloud ransomware scripts to target PHP applications, a new report says.
010
Alex Delamotte @alex.leetnoob.com · 18/11/2024
Love to see that a Spanish language site covered my recent cloud ransomware post & made a distracted boyfriend meme for the preview image espanol.news/cloud-ransom...
espanol.news
Cloud Ransomware adapta nuevos scripts a aplicaciones web - Espanol News
En lugar de apoyarse únicamente en depósitos con fugas y vulnerabilidades de proveedores de servicios en la nube (CSP) para filtrar datos confidenciales, una nueva cosecha de ransomware dirigido a…
120
Reposted by Alex Delamotte
jiska @naehrdine.bsky.social · 17/11/2024
How does the new iOS inactivity reboot work? What does it protect from? I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented. naehrdine.blogspot.com/2024/11/reve...
naehrdine.blogspot.com
Reverse Engineering iOS 18 Inactivity Reboot
Wireless and firmware hacking, PhD life, Technology
12277106
Alex Delamotte @alex.leetnoob.com · 17/11/2024
@francisck.com ‘s security feed is pretty solid for keyword matching bsky.app/profile/did:...
220
Alex Delamotte @alex.leetnoob.com · 17/11/2024
🙏
000
Alex Delamotte @alex.leetnoob.com · 17/11/2024
My crew is in need of 2-3 CCC tickets. If you know anyone with an extra, please reach out! #38C3
164
Reposted by Alex Delamotte
Fran Donoso @francisck.com · 16/11/2024
My team at $DAY_JOB did some great work this week and published a blog about some interesting malware we saw. It's a downloader that is abusing free Cloudflare Argo Tunnels and using it as a C2 server: labs.beazley.security/articles/hun...
labs.beazley.security
BSL - Hunting Mice In Tunnels
0101
Alex Delamotte @alex.leetnoob.com · 16/11/2024
There is a feed that tracks people’s first skeets but beyond that you’re on your own
010
Alex Delamotte @alex.leetnoob.com · 16/11/2024
Trying to function at the club but
0131
Alex Delamotte @alex.leetnoob.com · 16/11/2024
I’m in this post and I love it
010
Alex Delamotte @alex.leetnoob.com · 15/11/2024
I haven’t seen much content here that I suspect is LLM bot-enabled. Have you?
100
Alex Delamotte @alex.leetnoob.com · 15/11/2024
New sample: www.virustotal.com/gui/file/fd9...
virustotal.com
VirusTotal
VirusTotal
000
Alex Delamotte @alex.leetnoob.com · 15/11/2024
FBot still circulating almost a year later. Only changes in the diff are new API keys & email addresses in the config. www.sentinelone.com/labs/explori...
Screenshot of diff between January 2024 & November 2024 FBot samples
162
Reposted by Alex Delamotte
jiska @naehrdine.bsky.social · 15/11/2024
See the latest iOS inactivity reboot in action! iOS 18 comes with improved anti-theft measures. Three days w/o unlock, the iPhone will reboot, preventing thieves from getting your data. (1/4)
24214
Alex Delamotte @alex.leetnoob.com · 14/11/2024
I wrote a post on the realities of cloud & webserver ransomware. Check it out to see some of the toolsets & frameworks that can be used for these attacks.
0147
Alex Delamotte @alex.leetnoob.com · 14/11/2024
Babe wake up! The Onion just bought Infowars. Best news to wake up to in weeks.
091
Reposted by Alex Delamotte
Fran Donoso @francisck.com · 14/11/2024
Hey new folks, welcome to BlueSky! My name is Fran and I run the following #cybersecurity feed: bsky.app/profile/did:... I'll be working keep it spam free & good. If you're curious here are the keywords I'm looking for: gist.github.com/francisck/d8... Please provide feedback if you have any.
128217
Alex Delamotte @alex.leetnoob.com · 14/11/2024
Yea, seems that way. 🤷‍♀️
000