blueteamsec

630 readers
57 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
976
3
ClickFix Gets Creative: Malware Buried in Images (www.huntress.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
977
2
Detecting Cobalt Strike HTTP(S) Beacons with a Simple Method (academy.bluraven.io)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
978
6
Former contractor admits to hacking employer in retaliation for termination (www.justice.gov)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
979
3
Poland arrests Russian suspected of hacking Polish companies (www.reuters.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
980
3
Long Live Pass-The-Cert: Reviving the Classical Rendition of Lateral Movement across Entra ID joined Devices (www.alteredsecurity.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
981
3
China Security Report (www.nids.mod.go.jp)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
982
5
Inside the GitHub Infrastructure Powering North Korea’s Contagious Interview npm Attacks (socket.dev)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
983
2
Custom Mach-O Image Loader with in-memory Mach-O loader (github.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
984
3
The Mystery OAST Host Behind a Regionally Focused Exploit Operation (www.vulncheck.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
985
2
Field Notes on Malware: C2 Evasion Evolution and Detection Implications (deceptiq.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
986
3
Joint statement on malicious cyber activity targeting Canadian critical infrastructure - Canada.ca (www.canada.ca)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
987
1
Report Explanation| MSMT: The DPRK’s Violation and Evasion of UN Sanctions through Cyber and Information Technology Worker Activities (slowmist.medium.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
988
3
A Tsunami Sweeping the Cyber Battlefield Analysis of SectorA01’s Hacking Activities (medium.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
989
1
FlexibleFerret: macOS Malware Deploys in Fake Job Scams (www.jamf.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
990
1
UNC5174 그룹의 Discord Bot 백도어 악성코드 - Discord Bot backdoor malware from the UNC5174 group (asec.ahnlab.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
991
1
KeyDrop Scans The Web for Publicly Exposed API Keys - Innovation at Consumer Reports (innovation.consumerreports.org)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
992
2
The cyber threat to Canada’s water systems: Assessment and mitigation - Canadian Centre for Cyber Security (www.cyber.gc.ca)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
993
0
Critical strike: China's hacking training grounds (PART 1) (substack.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
994
3
Russian RomCom Utilizing SocGholish to Deliver Mythic Agent to U.S. Companies Supporting Ukraine (arcticwolf.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
995
2
QuietEnvelope, targeting the MailGates email protection system of Taiwanese company OpenFind. The toolset was uploaded in an archive, named spam_log.7z, to VirusTotal from Taiwan (x.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
996
3
Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications (www.cisa.gov)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
997
5
Department 40 Exposed: Inside the IRGC Unit Connecting Cyber Ops to Assassinations (blog.narimangharib.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
998
3
The Hidden Dangers of Calendar Subscriptions: 4 Million Devices at Risk (www.bitsight.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
999
5
Cooking up trouble: How TamperedChef uses signed apps to deliver stealthy payloads (www.acronis.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
1000
4
Russian-Linked StealC V2 Campaign Targeting Blender Users via Malicious .blend Files (www.morphisec.com)
submitted 2 months ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›