blueteamsec

462 readers

41 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

451

6

A technical analysis of the SALTWATER backdoor used in Barracuda 0-day vulnerability (CVE-2023-2868) exploitation (cybergeeks.tech)

submitted 2 years ago by campuscodi to c/blueteamsec

0 comments fedilink

452

5

Research: Zero-Day Shop (www.cyfirma.com)

submitted 2 years ago by campuscodi to c/blueteamsec

1 comments fedilink

453

6

Confused about the drama with the new BreachForums? Reading this will either help you or make your head spin (www.databreaches.net)

submitted 2 years ago by campuscodi to c/blueteamsec

1 comments fedilink

454

1

Bluepurple Pulse: week ending June 25th (bluepurple.binaryfirefly.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

455

1

Beyond the Horizon: Traveling the World on Camaro Dragon’s USB Flash Drives (research.checkpoint.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

456

2

Graphican: Flea Uses New Backdoor in Attacks Targeting Foreign Ministries (symantec-enterprise-blogs.security.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

457

3

Dissecting TriangleDB, a Triangulation spyware implant (securelist.com)

submitted 2 years ago by udunadan to c/blueteamsec

0 comments fedilink

458

2

Unpacking RDStealer: An Exfiltration Malware Targeting RDP Workloads (www.bitdefender.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

459

2

BlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage Activities (www.recordedfuture.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

460

2

Tracing Ransomware Threat Actors Through Stylometric Analysis and Chat Log Examination (medium.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

461

2

CID Lookout: Unsolicited Smartwatches Received by Mail (www.cid.army.mil)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

462

1

win32-app-isolation: Tools and documentation for Win32 app isolation (github.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

463

1

openfire鉴权绕过漏洞原理解析 - Openfire Authentication Bypass Vulnerability Principle Analysis (mp-weixin-qq-com.translate.goog)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

464

0

Korean reporting on the Lazarus fake recruiter campaign implant (download.hauri.net)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

465

1

한국내 macOS 이용자를 노린 APT37 공격 등장 - APT37 attack targeting macOS users in Korea (www.genians.co.kr)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

466

4

Inside of the WASP's nest: deep dive into PyPI-hosted malware (blog.virustotal.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

467

1

Uncovering a New Activity Group Targeting Governments in the Middle East and Africa - Palo Alto Networks Blog (www.paloaltonetworks.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

468

3

Resident Campaign (www.esentire.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

469

1

The Experience of Cybercrime in Georgia: Awareness, Victimisation and Reporting (rusi.org)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

470

7

Fragments of Cross-Platform Backdoor Hint at Larger Mac OS Attack (bitdefender.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

471

2

DoNot APT Elevates its Tactics by Deploying Malicious Android Apps on Google Play Store (www.cyfirma.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

472

7

Khashoggi’s widow sues Israeli firm over spyware she says ruined her life - In the lawsuit, Hanan Elatr says Saudi Arabia used NSO’s Pegasus spyware to track her and her husband’s whereabouts (archive.ph)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

473

6

China calls hacking report 'far-fetched' and accuses the US of targeting the cybersecurity industry (apnews.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink

474

5

Swing VPN app is a DDOS botnet (lecromee.github.io)

submitted 2 years ago by campuscodi to c/blueteamsec

1 comments fedilink

475

1

The Nightmare of Proc Hollow’s Exe (www.trustedsec.com)

submitted 2 years ago by digicat to c/blueteamsec

0 comments fedilink