@Maxou56800

@mcp@infosec.exchange

Joined September 2011
  • Tweets619
  • Following1.3K
  • Followers653
15Media
The #flareon10 countdown is now live at flare-on.com. Clear your weekend plans for Sept. 30th.
7
82
19
255
59,404
Maxou56800 retweeted
Synacktiv
@Synacktiv29 Aug 2023
Microsoft offers a VPN solution called Remote Access Service. @ektoplasma_'s latest research sheds light on Microsoft VPN service's inner workings, and provides forensic aspects to improve incident response and the monitoring of this service. synacktiv.com/publications/f…

Forensic Aspects of Microsoft Remote Access VPN

Forensic Aspects of Microsoft Remote Access VPN

synacktiv.com
27
1
70
8,036
The latest blog post from JPCERT/CC explains the details of, and countermeasures against, a new technique used in an attack that occurred in July, which bypasses detection by embedding a malicious Word file into a PDF file. blogs.jpcert.or.jp/en/2023/0…
103
1
242
32,324
Maxou56800 retweeted
abuse.ch
@abuse_ch29 Aug 2023
Quak 🦆! Goodbye #Qakbot, I hope we won't see you ever again 👋. And this is how it looks like from Feodo Tracker' perspective ⬇️. All #botnet C2s are offline 🛑 feodotracker.abuse.ch/browse… Tango down! 💪
Feodo Tracker Qakbot botnet C2 tracking

ALT Feodo Tracker Qakbot botnet C2 tracking

Spamhaus
@spamhaus29 Aug 2023
Qakbot 🦆🤖 takedown!!! Qakbot has been disrupted and dismantled by the FBI following a multinational effort. We will be assisting with the remediation - more info to follow... #malware #takedown #qakbot fbi.gov/news/stories/fbi-par…

FBI, Partners Dismantle Qakbot Infrastructure in Multinational Cyber Takedown | Federal Bureau of...

The FBI and the Justice Department announced a multinational operation to disrupt and dismantle the malware and botnet known as Qakbot.

fbi.gov
4
111
4
292
54,484
Maxou56800 retweeted
0xor0ne
@0xor0ne20 Aug 2023
Ghidralligator is a tool by @AirbusCyber to emulate Ghidra p-code for fuzzing with AFL++ Github Repo: github.com/airbus-cyber/ghid… #ghidra #fuzzing #infosec
1
120
3
373
54,762
Baptiste et R.M. présentent Symless, un outil de documentation automatique de base IDA. #SSTIC sstic.org/2023/presentat… Symless est disponible ici : github.com/thalium/symless

GitHub - thalium/symless: IDA Pro plugin that helps reconstruct structures

IDA Pro plugin that helps reconstruct structures. Contribute to thalium/symless development by creating an account on GitHub.

github.com
2
14
58
8,348
Wow #botconf is live streaming on YouTube! youtube.com/@BotConfTV
6
1
14
3,273
Twitter HQ is closed until November 21st. 75% of Twitter staff have chosen a severance package. Backup information: Mastadon: [email protected] Telegram: t.me/vxunderground tl;dr Twitter HQ right now
15
54
1
340
Hey everyone, I published a new blog about using #YARA for malware config extraction. I used #RedLine stealer for demonstration (extracting C2 and BotnetID). n1ght-w0lf.github.io/tutoria…

YARA for config extraction

YARA is a tool aimed at helping malware researchers to identify and classify malware samples. It’s considered…

n1ght-w0lf.github.io
3
111
4
282
Maxou56800 retweeted
BeeRumP@BeeRumP_Paris1 Jul 2022
Après 3 ans de pause, BeeRumP 2022 aura lieu le 16 septembre dans les locaux du @GroupeESIEA à Ivry ! Vous pouvez d'ores et déjà envoyer vos soumissions de rump à [email protected] (le meilleur moyen d'avoir une place 😁) !
1
35
65
Lockbit ransomware group has named Lockbit 3.0 as "Lockbit Black".
8
93
5
284
Maxou56800 retweeted
mr.d0x
@mrd0x6 Jan 2022
Bypass Defender AV static detection: If you name a malicious file DumpStack.log Defender doesn't scan it.
36
975
99
3,169
Maxou56800 retweeted
abuse.ch
@abuse_ch16 Nov 2021
#Emotet has almost doubled its botnet C2 infrastructure in the past 24 hours from 8 active C2s yesterday to 14 active C2s today 🔥🪲 We have also observed an increase of Emotet malspam today 📩 It seems to be very clear that Emotet is firing up its activity! 💥 Be prepared! 🛡️
2
173
8
314
#ESETresearch discovered a trojanized IDA Pro installer, distributed by the #Lazarus APT group. Attackers bundled the original IDA Pro 7.5 software developed by @HexRaysSA with two malicious components. @cherepanov74 1/5
16
903
113
1,727
Maxou56800 retweeted
@mikko
@mikko27 Jan 2021
Video clip from the big Emotet malware takedown this week. Notice the gold bars. Video source: National Police of Ukraine
10
216
40
507
Atelier Buffer overflow 101 - Jour 1 [CPU, RAM et GDB] - Ce soir (27 mai) à 20h30 animé par @Beaujeant - discord.com/invite/YTRPAn

Discord - Group Chat That’s All Fun & Games

Discord is great for playing games and chilling with friends, or even building a worldwide community. Customize your own space to talk, play, and hang out.

discord.com
6
9
Maxou56800 retweeted
Cabusar@cabusar27 May 2020
Atelier sur la sécurité bas niveau ce soir à 20h30 sur le Discord de @ZenkSecurity Niveau : débutant Animés par @beaujeant Accès public discord.gg/YTRPAn

Discord - Group Chat That’s All Fun & Games

Discord is great for playing games and chilling with friends, or even building a worldwide community. Customize your own space to talk, play, and hang out.

discord.com
1
9
1
7
Sweat @ZenkSecurity pour descendre dans les catacombes
3
20
Maxou56800 retweeted
/r/netsec@_r_netsec3 Feb 2020
TeamViewer stored user passwords encrypted, not hashed, and the key is now public whynotsecurity.com/blog/team…
130
3
168
Load more