blueteamsec

679 readers
16 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
2176
6
Infected Steam game downloads malware disguised as patch (www.gdatasoftware.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2177
1
Nimbus Manticore Deploys New Malware Targeting Europe (research.checkpoint.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2178
2
Elons (Proxima/Black Shadow related) ransomware attack via Oracle DBS External Jobs (labs.yarix.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2179
1
SystemBC – Bringing the Noise (blog.lumen.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2180
1
Deserialization Vulnerability in GoAnywhere MFT's License Servlet (www.fortra.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2181
3
Chypnosis: Stealthy Secret Extraction using Undervolting-based Static Side-channel Attacks (arxiv.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2182
3
EDR-Freeze: EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state. (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2183
1
Thalha Jubair DOJ complaint - alleged Scattered Spider (www.documentcloud.org)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2184
4
From Abstract Terms to Acumen: SEO Poisoning (medium.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2185
4
Domain Fronting is Dead. Long Live Domain Fronting! (www.praetorian.com)
submitted 6 months ago by digicat to c/blueteamsec
3 comments fedilink
2186
0
Hunting for SnakeDisk (www.knowyouradversary.ru)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2187
0
Hunting for PyPI Packages Delivering SilentSync RAT (www.knowyouradversary.ru)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2188
0
That's How Adversaries Disable Warning Messages (www.knowyouradversary.ru)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2189
0
Another Legitimate Web Service Abused by APT28 (www.knowyouradversary.ru)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2190
0
That's How Bloody Wolf Abuses WMI for Discovery (www.knowyouradversary.ru)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2191
1
That's How Adversaries Abuse WMI for Software Discovery (www.knowyouradversary.ru)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2192
-2
That's How Adversaries Modify Registry to Weaken Security (www.knowyouradversary.ru)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2193
2
GOLD SALEM’s Warlock operation joins busy ransomware landscape (news.sophos.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2194
3
Blog: Beyond Sandbox Domains: Rendering Untrusted Web Content with SafeContentFrame (bughunters.google.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2195
2
ByteCaster: Swiss Army Knife for payload encryption, obfuscation, and conversion to byte arrays – all in a single command (14 output formats supported)! ☢️ (github.com)
submitted 6 months ago by digicat to c/blueteamsec
1 comments fedilink
2196
0
‘I Was a Weird Kid’: Jailhouse Confessions of a Teen Hacker (www.bloomberg.com)
submitted 6 months ago by digicat to c/blueteamsec
1 comments fedilink
2197
5
Unmasking Akira: The ransomware tactics you can’t afford to ignore (zensec.co.uk)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2198
3
NCSC Summary: week ending September 21st (ctoatncsc.substack.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2199
3
Threat Actor Profile: APT27 (www.dexpose.io)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
2200
1
EarlyExceptionHandling: Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH (github.com)
submitted 6 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›