B3ndik (@vmptrst) header
B3ndik (@vmptrst) profile picture
Joined August 2013
Photo by B3ndik (@vmptrst)
[1/4] Joined by @vmptrst (@PwC) and @MsftSecIntel, we release attribution information on the Sandman #APT, first revealed at @labscon_io '23. Link ๐Ÿ‘‡ s1.ai/LuaDream
2
22
3
54
13,924
Verifying myself: I am bendikh on Keybase.io. LS5U7X-s8C_Ljhn22uLYnW6xUrnX-jFAcTMD / keybase.io/bendikh/sigs/LS5Uโ€ฆ
Replying to @armitagehacker
If you're looking to spice up the video: I work at a ๐—ฅ๐˜‚๐˜€๐˜€๐—ถ๐—ฎ๐—ป ๐—š๐—ผ๐˜ƒ๐—ฒ๐—ฟ๐—ป๐—บ๐—ฒ๐—ป๐˜ ๐—”๐—ด๐—ฒ๐—ป๐—ฐ๐˜†, we use Cobalt Strike to ๐˜€๐˜๐—ฎ๐˜† ๐—ถ๐—ป ๐˜๐—ผ๐˜‚๐—ฐ๐—ต ๐˜„๐—ถ๐˜๐—ต ๐—ณ๐—ฟ๐—ถ๐—ฒ๐—ป๐—ฑ๐˜€ ๐—ฎ๐—ฟ๐—ผ๐˜‚๐—ป๐—ฑ ๐˜๐—ต๐—ฒ ๐—ฒ๐—น๐—ฒ๐—ฐ๐˜๐—ถ๐—ผ๐—ป๐˜€.
5
7
3
68
#flareon6 Mark your calendars. (17 Aug 2019 00:00 UTC) flare-on.com
2
107
11
183
Have been looking forward to reading this, thanks for finishing it @REhints! :)
9
Technical details and IOCs from our #ShadowHammer research, link to #ShadowPad attacks: securelist.com/operation-shaโ€ฆ
4
3
We found the full CARBANAK source code & previously unseen plugins. Our #FLARE team spent 500 hours analyzing the 100,000+ lines of code. @mykill & @jtbennettjr just dropped day 1 of their 4-part blog series: fireeye.com/blog/threat-reseโ€ฆ Source code linked in blog. #CarbanakWeek ๐Ÿฆˆ๐Ÿ’ณ
15
424
40
757
Our AI cyberstations reports an increased chance for a grade 1 CYBERSTORM to hit the UK, sweeping in from the eastern parts of cyberspace. independent.co.uk/news/uk/crโ€ฆ
4
5
Key Reinstallation Attacks: Breaking WPA2 by forcing nonce reuse krackattacks.com/ and see the paper at papers.mathyvanhoef.com/ccs2โ€ฆ
40
974
114
970
Every article that included a *live link* to the wcry killswitch domain. You suck and I hope your coffee is slightly sub par today.
9
42
206
Several security blogs advice to block iuqerfsodp9ifjaposdfjhgosurijfaewrwergwea[.]com, this is the kill-switch domain, do >NOT< block it.
3
64
2
34
If your opponent is ill-tempered, seek to social engineer him. Pretend to be weak, that he may grow arrogant. His jimmies will rustle.
2
165
4
332
It was to be expected but sadly a reality now; an exploit kit for Android devices going around dropping ransomware: bluecoat.com/security-blog/2โ€ฆ
41
28
JBoss vulns lead to web shells. Research details - blog.talosintel.com/2016/04/โ€ฆ #Talos
2
4
CVE-2016-0034 in Angler. Overriden GetChars method in decrypted Silverlight exploit.
1
43
36
#Wireshark 2.0 include #USBPcap ( desowin.org/usbpcap/ ), it is now possible to tap directly USB traffic
2
445
317
Android update process: - Google releases update - Samsung runs apt-get - TouchWiz breaks - Model no longer supported
11
266
326
Future war stories.. #cyberfunny
10
4