0x1CE @BugAbuse

*** NOTHING TO SEE HERE - CARRY ON *** 👾 Joined January 2011

Tweets

149
Followers

116
Following

416
Likes

2K

Check Point Research @_CPResearch_

3 months ago

Great work @_CPResearch_!

0 109 268 41K 112

0 0 1 108 0

#ESETresearch has discovered a zero day exploit abusing #CVE-2025-24983 vulnerability in Windows Kernel to elevate privileges (#LPE). First seen in the wild in March 2023, the exploit was deployed through #PipeMagic backdoor on the compromised machines. 1/4

3 73 200 25K 68

Download Image

PIVOTcon @pivot_con

9 months ago

#PIVOTcon25 #CfP is open and you can submit your proposals till 7 FEB 2025 Remember - one track,30m - no recording/streaming/tweeting. U should feel comfy to share more - No TLP:WHITE - Original content only Let us guide u through with a little meme-thread #CTI #ThreatIntel 1/10

1 17 35 7K 8

Download Image

ESET Research @ESETresearch

9 months ago

#ESETresearch reveals the first Linux UEFI bootkit, Bootkitty. It disables kernel signature verification and preloads two ELFs unknown during our analysis. Also discovered, a possibly related unsigned LKM – both were uploaded to VT early this month. welivesecurity.com/en/eset-resear… 1/5

2 166 310 35K 129

Volexity @Volexity

10 months ago

.@Volexity’s latest blog post describes in detail how a Russian APT used a new attack technique, the “Nearest Neighbor Attack”, to leverage Wi-Fi networks in close proximity to the intended target, while the attacker was halfway around the world. volexity.com/blog/2024/11/2… #dfir

7 178 386 93K 153

PagedOut @pagedout_zine

a year ago

Issue #4 is out – enjoy! pagedout.institute/?page=issues.p… Please RT and tell your friends :)

5 285 542 189K 141

Download Image

ESET Research @ESETresearch

a year ago

#ESETresearch has discovered the Lunar toolset, two previously unknown backdoors (which we named #LunarWeb and #LunarMail) possibly linked to Turla, compromising a European MFA and its diplomatic missions abroad. welivesecurity.com/en/eset-resear… 1/6

1 59 94 21K 15

LABScon @labscon_io

a year ago

❤️‍🔥!! CALL FOR PAPERS !! ❤️‍🔥 Submission Deadline: June 21, 2024 - Talks are 20 minutes long + 5 minutes for Q&A - Workshops are 90 minutes long. LABScon is primarily a threat intelligence and vulnerability research conference but we keep an open-mind. CFP is live:…

3 33 43 17K 5

Boris Larin @oct0xor

2 years ago

Thanks to marcan (social.treehouse.systems/@marcan/111655…) and @zhuowei (x.com/zhuowei/status…) now we know the original purpose for this unknown hardware feature. Its MMIO debug registers for GPU L2 cache. I am really excited that we are very close to solving this mystery!

Boris Larin @oct0xor

2 years ago

25 248 938 312K 189

8 99 488 109K 77

Boris Larin @oct0xor

2 years ago

The recording of our (me, @bzvr_, @kucher1n) #37c3 talk “Operation Triangulation: What You Get When Attack iPhones of Researchers” was published! media.ccc.de/v/37c3-11859-o…

21 292 850 166K 221

Greg Linares (Laughing Mantis) @Laughing_Mantis

2 years ago

Worst rebranding of the year Microsoft APT rebranding

James @JamesAgombar

2 years ago

Worst rebranding of the year Microsoft APT rebranding https://t.co/PCDuWoTdkt

75 53 853 92K 11

6 8 43 9K 2

Download Image

ESET Research @ESETresearch

2 years ago

During routine monitoring of suspicious activities on the systems of high-profile customers, #ESETresearch discovered a sophisticated and previously undocumented #StealthFalcon backdoor that we named #Deadglyph. welivesecurity.com/en/eset-resear…

2 50 111 18K 25

facundo Mz @0xfmz

3 years ago

Our research on Tick APT group is out! 👇

ESET Research @ESETresearch

3 years ago

Our research on Tick APT group is out! 👇

3 63 125 50K 24

0 2 7 1K 0

Shane Huntley @ShaneHuntley

3 years ago

More 0day in the wild, this time from North Korea targeting Internet Explorer from @_clem1 and @benoitsevens in TAG. Yes IE exploits still work in 2022! blog.google/threat-analysi… Targets seem to be N. Korean defectors and human rights activists and South Korean journalists.

5 75 176 0 25

ESET Research @ESETresearch

3 years ago

#ESETesearch discovered Dolphin, a sophisticated backdoor extending the arsenal of the #ScarCruft APT group. Dolphin has a wide range of spying capabilities and is deployed on selected targets only. welivesecurity.com/2022/11/30/who… 1/6

1 68 135 0 20

ESET Research @ESETresearch

3 years ago

#BREAKING #ESETresearch helped analyze a #Sandworm campaign against an energy company in #Ukraine 🇺🇦 using #CaddyWiper and a new version of the infamous #Industroyer malware. #WarInUkraine welivesecurity.com/2022/04/12/ind… 1/5

10 333 545 0 45

Adrien B @Int2e_

4 years ago

Time to chip in for #100DaysofYARA, this rule is a (fun) example that looks for a structure (#Regin VFS) instead of data. Structures (often config) are useful to validate your understanding of malware functionality and for more resilient rules. But be careful with boundaries :)

1 6 26 0 2

Download Image

Ian Beer @i41nbeer

4 years ago

Today we're publishing a detailed technical writeup of FORCEDENTRY, the zero-click iMessage exploit linked by Citizen Lab to the exploitation of journalists, activists and dissidents around the world. googleprojectzero.blogspot.com/2021/12/a-deep…

57 2K 4K 0 651

ESET Research @ESETresearch

4 years ago

#ESETresearch discovered a trojanized IDA Pro installer, distributed by the #Lazarus APT group. Attackers bundled the original IDA Pro 7.5 software developed by @HexRaysSA with two malicious components. @cherepanov74 1/5