iiinova — where your digital self keeps evolving

Reposted by Andrew Northern

Cynthia Brumfield @metacurity.com · 14/01/2025

The Justice Department and FBI announced a law enforcement operation that, alongside international partners, deleted “PlugX” malware from thousands of infected computers worldwide implanted by Chinese hackers known as “Mustang Panda” or “Twill Typhoon." www.justice.gov/opa/pr/justi...

justice.gov

Justice Department and FBI Conduct International Operation to Delete Malware Used by China-Backed Hackers

The Justice Department and FBI today announced a multi-month law enforcement operation that, alongside international partners, deleted “PlugX” malware from thousands of infected computers worldwide. A...

086

Andrew Northern @exraritas.bsky.social · 13/01/2025

I wish that I would have known this or have had exposure to this. I was shocked at how defensive I became the first time you edited my work. Sorry for that. I think I am growing and have grown 🌱

010

Reposted by Andrew Northern

PIVOTcon @pivotcon.bsky.social · 01/01/2025

Dear Threat Researchers! We wish you a fruitful year full of impactful research! Stay healthy, stay happy and don't stop being awesome! 🥂🕺💃🎇🎆 #HappyNewYear2025 #CTI #PIVOTcon25 #ThreatResearch #ThreatIntel

093

Andrew Northern @exraritas.bsky.social · 01/01/2025

Day 1 of giving the murder of crows 🐦‍⬛ a present 🎁 until we are friends. Today’s present: Part of a Hash Brown

010

Reposted by Andrew Northern

Josh Stroschein | The Cyber Yeti @jstrosch.bsky.social · 01/11/2024

🎙️ I'm excited to announce the launch of a new podcast - Behind the Binary! #BehindTheBinary focuses on the stories of the people, technology, and events that have shaped the world of reverse engineering. You can find it on Spotify👇 open.spotify.com/show/3yWgmIu...

open.spotify.com

Behind the Binary by Google Cloud Security

Podcast · Josh Stroschein · Welcome to Behind the Binary, the podcast that introduces you to the fascinating people, technology, and tools driving the world of reverse engineering. Join your host, Jos...

093

Reposted by Andrew Northern

Selena Larson @selenalarson.bsky.social · 15/11/2024

New episode of DISCARDED where I chat with Genina Po about how she catches phish 🎣 We dive into how to write detections, what to hunt for when finding phish kits, and some of her recent research on phishing scams. Tune in wherever you get your podcasts! Apple: podcasts.apple.com/us/podcast/d...

podcasts.apple.com

Scams, Smishing, and Safety Nets: How Emerging Threats Catches Phish

Podcast Episode · DISCARDED: Tales From the Threat Research Trenches · 11/15/2024 · 51m

1124

Reposted by Andrew Northern

Kostas @kostastsale.bsky.social · 20/11/2024

Such a thorough analysis of #RaspberryRobin in this article that taught me a lot 👇 😂

172

Reposted by Andrew Northern

Brad @malware-traffic-analysis.net · 25/11/2024

2024-11-25 (Monday): My thanks to the criminals who email malware directly to my inbox. This one is #AgentTesla using #FTP for #data_exfiltration. Sends to FTP server approx every 10 minutes. Attached disk image file: bazaar.abuse.ch/sample/7a11d... Extracted EXE: bazaar.abuse.ch/sample/2362b...

173

Andrew Northern @exraritas.bsky.social · 25/11/2024

What if I’m just extremely eager to check in a few thousand times?

020

Andrew Northern @exraritas.bsky.social · 18/11/2024

@hultquist.bsky.social hitting us with the hottest phishing lure of all time

160

Reposted by Andrew Northern

Nathan McNulty @nathanmcnulty.com · 17/11/2024

Almost embarrassed to post this, but I've always used Fiddler or Burp for capturing things like this... I didn't have admin rights and was trying to capture network traffic from a pop-up, so Dev Tools wasn't working Apparently this is built into Chrome/Edge! So cool :) edge://net-export/

1518645

Andrew Northern @exraritas.bsky.social · 16/11/2024

Man I used AFLOP for years. Makes me miss it.

000

Andrew Northern @exraritas.bsky.social · 16/11/2024

Trying to rebuild my following here. Tag other security researchers and professionals in the comments please. I’ll follow back :)

340

Reposted by Andrew Northern

Jamie Levy 🦉 @gleeda.bsky.social · 15/11/2024

🧵Today’s blogpost focuses on a newer ransomware variant named SafePay. Needless to say, ransomware sucks. When this new variant appeared, it gained our attention. 👀 Let’s dig into what happened and what makes it tick ⬇️: