@synku@infosec.exchange Anti-malvertising since 2013
Joined July 2010
- Tweets549
- Following213
- Followers193
- Likes246
Jerome Dangu retweeted
㊗️上原ひろみが音楽を手がけた映画『BLUE GIANT』が、第47回日本アカデミー賞にて【最優秀音楽賞】を受賞しました🎊
『BLUE GIANT』オリジナル・サウンドトラック
音楽 #上原ひろみ
BLUE-GIANT.lnk.to/OST
Jerome Dangu retweeted
News: I have quit VICE. Me and a small group of Motherboard writers have launched our own company: 404media.co. We'll continue impactful journalism.
If you've ever wanted to support my work, this is the time. Please subscribe monthly/yearly nytimes.com/2023/08/22/busin…
Jerome Dangu retweeted
Leaked Google document: “We Have No Moat, And Neither Does OpenAI”
The most interesting thing I've read recently about LLMs - a purportedly leaked document from a researcher at Google talking about the huge strategic impact open source models are having
simonwillison.net/2023/May/4…
Jerome Dangu retweeted
Fake "Monkey Drainer" leak on @github targets wannabe #Web3 Scammers with a Raccoon Stealer!
github.com/Monkey-Drainer/Mo…
c2: 193.37.213.23
As crypto-drainers gain popularity, we see more and more backdoored or malicious codebases targeting would-be thieves.
Jerome Dangu retweeted
Malvertisers love to abuse low-impact browser bugs. They're often slow to get patched and make a significant impact on the efficacy of their malicious campaigns.
blog.confiant.com/malvertise…
Jerome Dangu retweeted
TAG Working Groups are back on THIS WEEK🎉 What have we got in store?
For the #AntiMalware working group, @WeAreConfiant's John Murphy has got a couple of ideas of how to move #antimalware programme forward ⏩⏩⏩
Details to register for the session are in TAG Member's inbox!
Jerome Dangu retweeted
A new blog post from Taha Karim ( @lordx64 ) revealing a new method for Mac malware to conceal C2 configuration within the headers of Apple DMG files. This technique was observed in a Shlayer variant, we have dubbed it OSX/Shlayer.F.
blog.confiant.com/lart-de-l-…
Thank you @trishlaostwal for chatting with me about the state of Twitter security after the brual downsizing, and the questions it raises for their risk exposure moving forward. Among many things, pressure to make more revenue with ads could lead to an increase in Malvertising ☠️
Scoop: A bug in Twitter’s system, which was rectified on Saturday, exposed sensitive information to the company’s advertising team. Names, addresses and credit card information of several advertisers were left exposed.
adweek.it/3UzHmiy via @Adweek
Jerome Dangu retweeted
Last year, while conducting audits on SDKs installed in mobile apps for @SafeTechLabs, a popular SDK installed in thousands of apps called “Pushwoosh” started to raise some odd questions, was it secretly Russian? Reuters has an explosive story out today: reuters.com/technology/exclu…🧵
When Adtech meets National Security, publishers and app developers (and uh... governments!) need to know their vendors! Great investigation by Reuters' @pearswick and team. Thank you for working with @WeAreConfiant, @Kaileighrose and I on the research.
reuters.com/technology/exclu…
Jerome Dangu retweeted
Malvertising attack matrix from @WeAreConfiant. Details entire chain, from initial access, execution, to browser exploitation, credential access & more. Helps communicate actionable threat intelligence to entities outside of the #adtech space. matrix.confiant.com/#matrix #infosec
Voldrakus! Cool interview of Confiant Privacy Engineer @Kaileighrose by @Digiday's @petersontee going over this concerning case of TCF consent string abuse:
digiday.com/marketing/how-an…
Original research at confiant.com/privacy-hub/vol…
Jerome Dangu retweeted
🔥 Don't forget: our free webinar happening tomorrow (20th September) at 1PM EST with experts @lordx64 and @eliyastein! confiant.com/webinar/lessons… #malware #web3 #crypto #webinar
Jerome Dangu retweeted
Confiant’s Semi-Annual 2022 H1 Malvertising and Ad Quality Index (MAQ) is ready for download. Get yours today at: confiant.com/maq-index
Jerome Dangu retweeted
very very cool findings or a very very clever attack
great work @Kaileighrose and Confiant Inc lnkd.in/echuJAAQ
While adtech is blamed for facilitating "surveillance advertising", here's a malicious actor anonymously tracking Americans using consent steganography, unbeknownst to the ecosystem. By @WeAreConfiant's @Kaileighrose
confiant.com/privacy-hub/vol…
#privacy #malvertising #defcon
This is the write-up for the research that @Kaileighrose presented at DEFCON 30's Crypto & Privacy Village on August 14, 2022 in Las Vegas 💥