blueteamsec

679 readers
37 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
1576
3
Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications (www.cisa.gov)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1577
5
Department 40 Exposed: Inside the IRGC Unit Connecting Cyber Ops to Assassinations (blog.narimangharib.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1578
3
The Hidden Dangers of Calendar Subscriptions: 4 Million Devices at Risk (www.bitsight.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1579
5
Cooking up trouble: How TamperedChef uses signed apps to deliver stealthy payloads (www.acronis.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1580
4
Russian-Linked StealC V2 Campaign Targeting Blender Users via Malicious .blend Files (www.morphisec.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1581
2
Native Secure Enclaved backed ssh keys on MacOS (gist.github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1582
2
Discreet Driver Loading in Windows (whiteknightlabs.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1583
2
Dissenting Statement of Commissioner Anna M. Gomez - Protecting the Nation’s Communications Systems from Cybersecurity Threats (docs.fcc.gov)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1584
1
ToddyCat APT's new tools and techniques (securelist.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1585
1
Processing CloudTrail Logs from S3 (deceptiq.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1586
4
WhatsApp compromise leads to Astaroth deployment (news.sophos.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1587
3
santamon: Lightweight macOS detection agent built on Santa’s Endpoint Security telemetry. (github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1588
3
The threat actors behind Shai Hulud has struck again, hitting Zapier and Ensdomains (www.aikido.dev)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1589
3
Shai-Hulud 2.0: Ongoing Supply Chain Attack (www.wiz.io)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1590
3
North Korean APT duo join forces: Kimsuky acts as the "eyes" to steal intelligence, while Lazarus steals cryptocurrency to fill the "money bag"! (mp.weixin.qq.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1591
4
Kimsuky’s Ongoing Evolution of KimJongRAT and Expanding Threats (www.enki.co.kr)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1592
12
NSO seeks to overturn WhatsApp case, saying it is ‘catastrophic’ for the spyware maker (therecord.media)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1593
2
GoDefender: Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY. (github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1594
1
magnet: Purple-team telemetry & simulation toolkit. (github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1595
1
CustomC2ChannelTemplate: template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader. (github.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1596
1
Systematically Deconstructing APVD Steganography and its Payload with a Unified Deep Learning Paradigm - ""our model achieves a detection accuracy of 96.2 percent." (arxiv.org)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1597
1
疑似APT-C-26（Lazarus）组织利用远程IT伪装部署监控程序的攻击行动分析 - Analysis of attack activities suspected to be deployed by the APT-C-26 (Lazarus) group using remote IT spoofing to deploy surveillance programs (mp.weixin.qq.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1598
1
MuddyWater组织近期钓鱼攻击活动分析 - Analysis of MuddyWater's Recent Phishing Attacks (mp.weixin.qq.com)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1599
1
The Guardians of Name Street: Studying the Defensive Registration Practices of the Fortune 500 (fabianmonrose.github.io)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
1600
1
Understanding Orphan Flows: This work presents the first large-scale analysis of orphan flows to understand 1) the practical hurdles to measuring orphan flows, and 2) the potential utility for SOCs (angelosk.github.io)
submitted 4 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›