blueteamsec

634 readers

18 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

2426

3

Resident Campaign (www.esentire.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2427

1

The Experience of Cybercrime in Georgia: Awareness, Victimisation and Reporting (rusi.org)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2428

7

Fragments of Cross-Platform Backdoor Hint at Larger Mac OS Attack (bitdefender.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2429

2

DoNot APT Elevates its Tactics by Deploying Malicious Android Apps on Google Play Store (www.cyfirma.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2430

7

Khashoggi’s widow sues Israeli firm over spyware she says ruined her life - In the lawsuit, Hanan Elatr says Saudi Arabia used NSO’s Pegasus spyware to track her and her husband’s whereabouts (archive.ph)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2431

6

China calls hacking report 'far-fetched' and accuses the US of targeting the cybersecurity industry (apnews.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2432

5

Swing VPN app is a DDOS botnet (lecromee.github.io)

submitted 2 years ago by campuscodi to c/blueteamsec

1 comments fedilink

2433

1

The Nightmare of Proc Hollow’s Exe (www.trustedsec.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2434

2

Case Study: cracking a global Adversary-In-The-Middle campaign using a threat intelligence toolkit (blog.sygnia.co)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2435

1

Automating acquisition for incident response (falconforce.nl)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2436

1

Security Threat Insights Report Q1 2023 - notable malware campaigns, trends and techniques identified from customer telemetry in calendar Q1 2023 (threatresearch.ext.hp.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2437

2

Shampoo: A New ChromeLoader Campaign (threatresearch.ext.hp.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2438

1

OnlyDcRatFans: Malware Distributed Using Explicit Lures of OnlyFans Pages and Other Adult Content (www.esentire.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2439

1

Cyber attack by group UAC-0057 (GhostWriter) against the state organization of Ukraine using PicassoLoader and Cobalt Strike Beacon (CERT-UA#6852) - use Chrome translate (cert.gov.ua)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2440

1

Evasive File Smuggling with Skyhook (www.blackhillsinfosec.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2441

1

Threat activity and vulnerabilities in Indonesia, Malaysia, Philippines, and Thailand | APNIC Blog (blog.apnic.net)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2442

1

Shuckworm: Inside Russia’s Relentless Cyber Campaign Against Ukraine (symantec-enterprise-blogs.security.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2443

2

Hijacking S3 Buckets: New Attack Technique (checkmarx.com)

submitted 2 years ago by digicat to c/blueteamsec

1 comments fedilink

2444

4

Russian National Arrested and Charged with Conspiring to Commit LockBit Ransomware Attacks Against U.S. and Foreign Businesses (www.justice.gov)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2445

1

Video-Based Cryptanalysis: Exploiting a Video Camera's Rolling Shutter to Recover Secret Keys from Devices Using Video of Their Power LED - demonstrate the application of video-based cryptanalysis by (www.nassiben.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2446

1

한글 문서 파일을 위장한 악성코드(Kimsuky) - Malicious code disguised as a Hangul document file (Kimsuky) (asec-ahnlab-com.translate.goog)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2447

1

다양한 주제를 이용하여 CHM 악성코드를 유포 중인 Kimsuky - Kimsuky spreading CHM malware using various topics (asec-ahnlab-com.translate.goog)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2448

3

BypassAV: This map lists the essential techniques to bypass anti-virus and EDR (github.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2449

3

RunInSandbox: a quick way to run/extract files in Windows Sandbox with a right-click on a file (www.systanddeploy.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

2450

1

MSSQL linked servers: abusing ADSI for password retrieval (www.tarlogic.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink