Sign in

Andrew Northern

@exraritas.bsky.social
942 followers 159 following 35 posts

🔮 Senior Threat Researcher at @proofpoint 🔮 | Kindness and Compassion | Not a reflection of the opinions or policies of my employer | Andrew Northern

PostsRepliesMedia
Reposted by Andrew Northern
Cynthia Brumfield @metacurity.com · 14/01/2025
The Justice Department and FBI announced a law enforcement operation that, alongside international partners, deleted “PlugX” malware from thousands of infected computers worldwide implanted by Chinese hackers known as “Mustang Panda” or “Twill Typhoon." www.justice.gov/opa/pr/justi...
justice.gov
Justice Department and FBI Conduct International Operation to Delete Malware Used by China-Backed Hackers
The Justice Department and FBI today announced a multi-month law enforcement operation that, alongside international partners, deleted “PlugX” malware from thousands of infected computers worldwide. A...
086
Reposted by Andrew Northern
PIVOTcon @pivotcon.bsky.social · 01/01/2025
Dear Threat Researchers! We wish you a fruitful year full of impactful research! Stay healthy, stay happy and don't stop being awesome! 🥂🕺💃🎇🎆 #HappyNewYear2025 #CTI #PIVOTcon25 #ThreatResearch #ThreatIntel
093
Andrew Northern @exraritas.bsky.social · 01/01/2025
Day 1 of giving the murder of crows 🐦‍⬛ a present 🎁 until we are friends. Today’s present: Part of a Hash Brown
010
Andrew Northern @exraritas.bsky.social · 30/12/2024
Joe knows ball
000
Andrew Northern @exraritas.bsky.social · 30/12/2024
000
Andrew Northern @exraritas.bsky.social · 30/12/2024
000
Reposted by Andrew Northern
Christian Blichmann 🇺🇦 (also on Mastodon) @admvonschneider.bsky.social · 03/01/2023
A while back, I made a thing that turns #BinDiff matches into YARA rules: github.com/google/vxsig #100DaysOfYARA
github.com
GitHub - google/vxsig: Automatically generate AV byte signatures from sets of similar binaries.
Automatically generate AV byte signatures from sets of similar binaries. - google/vxsig
0104
Andrew Northern @exraritas.bsky.social · 09/12/2024
060
Andrew Northern @exraritas.bsky.social · 09/12/2024
Man I love Polyphia. open.spotify.com/track/0BE86K...
open.spotify.com
Sweet Tea
Polyphia, Aaron Marshall · Muse · Song · 2014
010
Andrew Northern @exraritas.bsky.social · 04/12/2024
000
Reposted by Andrew Northern
Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 01/11/2024
🎙️ I'm excited to announce the launch of a new podcast - Behind the Binary! #BehindTheBinary focuses on the stories of the people, technology, and events that have shaped the world of reverse engineering. You can find it on Spotify👇 open.spotify.com/show/3yWgmIu...
open.spotify.com
Behind the Binary by Google Cloud Security
Podcast · Josh Stroschein · Welcome to Behind the Binary, the podcast that introduces you to the fascinating people, technology, and tools driving the world of reverse engineering. Join your host, Jos...
093
Reposted by Andrew Northern
Selena Larson @selenalarson.bsky.social · 15/11/2024
New episode of DISCARDED where I chat with Genina Po about how she catches phish 🎣 We dive into how to write detections, what to hunt for when finding phish kits, and some of her recent research on phishing scams. Tune in wherever you get your podcasts! Apple: podcasts.apple.com/us/podcast/d...
podcasts.apple.com
Scams, Smishing, and Safety Nets: How Emerging Threats Catches Phish
Podcast Episode · DISCARDED: Tales From the Threat Research Trenches · 11/15/2024 · 51m
1124
Reposted by Andrew Northern
Kostas @kostastsale.bsky.social · 20/11/2024
Such a thorough analysis of #RaspberryRobin in this article that taught me a lot 👇 😂
172
Reposted by Andrew Northern
Brad @malware-traffic-analysis.net · 25/11/2024
2024-11-25 (Monday): My thanks to the criminals who email malware directly to my inbox. This one is #AgentTesla using #FTP for #data_exfiltration. Sends to FTP server approx every 10 minutes. Attached disk image file: bazaar.abuse.ch/sample/7a11d... Extracted EXE: bazaar.abuse.ch/sample/2362b...
173
Andrew Northern @exraritas.bsky.social · 18/11/2024
@hultquist.bsky.social hitting us with the hottest phishing lure of all time
160
Andrew Northern @exraritas.bsky.social · 18/11/2024
www.proofpoint.com/us/blog/thre...
proofpoint.com
Security Brief: ClickFix Social Engineering Technique Floods Threat Landscape | Proofpoint US
What happened  Proofpoint researchers have identified an increase in a unique social engineering technique called ClickFix. And the lures are getting even more clever.
020
Reposted by Andrew Northern
Nathan McNulty @nathanmcnulty.com · 17/11/2024
Almost embarrassed to post this, but I've always used Fiddler or Burp for capturing things like this... I didn't have admin rights and was trying to capture network traffic from a pop-up, so Dev Tools wasn't working Apparently this is built into Chrome/Edge! So cool :) edge://net-export/
1518645
Andrew Northern @exraritas.bsky.social · 16/11/2024
Trying to rebuild my following here. Tag other security researchers and professionals in the comments please. I’ll follow back :)
340
Reposted by Andrew Northern
Jamie Levy 🦉 @gleeda.bsky.social · 15/11/2024
🧵Today’s blogpost focuses on a newer ransomware variant named SafePay. Needless to say, ransomware sucks. When this new variant appeared, it gained our attention. 👀 Let’s dig into what happened and what makes it tick ⬇️:
A redacted view of the SafePay onion website hosting information about compromised machinesDirectory listing from the attacker's onion siteApache Server info page
23612
Andrew Northern @exraritas.bsky.social · 15/11/2024
Prized possession.
010
Andrew Northern @exraritas.bsky.social · 14/11/2024
Started out with this set of block words. Quickly learned that there will be many more.
010
Andrew Northern @exraritas.bsky.social · 14/11/2024
Meh. A lot of engagement farming here already. Splendid
010
Reposted by Andrew Northern
Myrtus @malwareindepth.com · 14/11/2024
#Latrodectus campaign from today gist.github.com/myrtus0x0/cd.... If anything comes of it, I'll put in thread
gist.github.com
Latrodectus_2024_11_13.md
GitHub Gist: instantly share code, notes, and snippets.
1176
Andrew Northern @exraritas.bsky.social · 14/11/2024
Used my AirPods to take a hearing test today. Not surprised at the amount of hearing I have lost. Interesting to see if quantified.
000
Andrew Northern @exraritas.bsky.social · 14/11/2024
Probably going to be much more candid on here. We will see.
000
Andrew Northern @exraritas.bsky.social · 14/11/2024
It is now 2:45 and I have failed to eat breakfast or lunch but I did manage to write emulation for the server side for a piece of malware I track.
130
Andrew Northern @exraritas.bsky.social · 14/11/2024
Got this bad boy tattooed on me a little over a week ago.
010
Andrew Northern @exraritas.bsky.social · 03/07/2023
I’m here to shitpost about malware and information security.
030
Andrew Northern @exraritas.bsky.social · 03/07/2023
Hello World!
010