dougy @R3dHash

Cyber Threat Intelligence | OSINT | Misinformation | Threat Hunting linkedin.com/in/julien-duga… Joined April 2018

Tweets

908
Followers

872
Following

2K
Likes

6K

k1nd0ne @k1nd0ne

2 months ago

Following the @volatility parity release, VolWeb v3.15.0 is now available with some new features like Linux “Explore” support. Checkout the release note here: forensicxlab.com/blog/volweb-3-… Project: github.com/k1nd0ne/VolWeb #DFIR

3 32 101 4K 54

Download Image

vx-underground @vxunderground

3 months ago

CyberNews pushed the same fucking story last year. It's even written by the same author. You can't keep fear mongering people every time a Threat Actor assembles a data leak package

49 269 2K 105K 172

Download Image

FBI @FBI

4 months ago

An indictment was unsealed yesterday charging four foreign nationals with operating botnet services that targeted thousands of wireless internet routers. The conspirators allegedly amassed more than $46 million from selling access to infected routers. justice.gov/usao-ndok/pr/b…

113 466 1K 54K 63

Download Image

Who said what? @g0njxa

4 months ago

Bearhost (aka UNDERGROUND and recently VOODOO SERVERS), alledgelly the "biggest bulletproof hosting" has decided to do an exit scam after several years of service, leaving a "farewell note" in forums and shutting down servers suddenly with no further reasons @spamhaus @abuse_ch

2 11 70 10K 18

Download Image

PRODAFT @PRODAFT

5 months ago

🚨 A major blow to ransomware ops: Medialand, a core BPH linked to Yalishanda (LARVA-34), exposed. Used by BlackBasta & others. Likely same actors behind Feb 11 BlackBasta leak. This leak offers rare, high-value insight into cybercriminal infrastructure. #ThreatIntel

1 35 121 34K 52

Download Image

Mandiant (part of Google Cloud) @Mandiant

5 months ago

🚨 Ivanti Vulnerability (CVE-2025-22457) Actively Exploited Mandiant & Ivanti discovered active exploitation of a critical buffer overflow vulnerability in Ivanti Connect Secure VPN, leading to remote code execution. Patch now to secure your systems: bit.ly/4iTpKdD

0 31 53 12K 10

Download Image

Intrinsec @Intrinsec

5 months ago

🔎 [THREAD] – New analysis by Intrinsec Cyber Threat Intelligence on the latest operations by Russian-aligned intrusion sets #UAC0050 & #UAC0006📢 🔗 Our Report: intrinsec.com/wp-content/upl…

2 28 71 11K 38

Horizon3 Attack Team @Horizon3Attack

5 months ago

Our Indicators of Compromise blog post for CVE-2025-2825, an authentication bypass affecting #CrushFTP. horizon3.ai/attack-researc…

1 42 73 10K 34

abuse.ch @abuse_ch

5 months ago

False positives happen - it’s just part of managing community-driven data! 🤷 But transparency is key, that's why we’ve rolled out a consolidated False Positive List... 🔍 Now you can identify false positives across our platforms via API, with CSV or JSON export options. Find…

1 16 68 6K 14

Download Image

Costin Raiu @craiu

6 months ago

🚨 Suspicious French-themed domains spotted in the Prospero OOO (RU) range! 🚨 A cluster of domains mimicking BNP Paribas, Ameli, La Poste, Netflix, and more—likely set up for fraud. Stay vigilant! 🕵️‍♂️ Examples: 15-bnpparibas[.]com 5-bnpparibas[.]com 8-bnpparibas[.]com…

4 34 63 8K 12

abuse.ch @abuse_ch

6 months ago

We have received the following comment from Kaspersky which we would like to share with you ⤵️ "Kaspersky is aware of the public claim about the company's allegedly providing services to a "bulletproof" web hosting provider. Kaspersky denies these claims as the company does not…

4 5 8 6K 4

Donncha Ó Cearbhaill @DonnchaC

6 months ago

🚨 UPDATE YOUR DEVICES 🚨: Amnesty International uncovers sophisticated zero-day exploit affecting billions of Android devices. Cellebrite's Linux USB exploit was used to unlock the phone of a Serbian youth activist, targeted in December 2024 **after** previous reports abuses

4 200 502 46K 164

Download Image

Intrinsec @Intrinsec

6 months ago

🔎 [THREAD] – Doppelgänger: A New Disinformation Campaign Spreading on Social Media 📢 📄 A newly released report sheds light on the tactics used by this Russian-linked network to target multiple Western countries. ⬇️

1 7 12 2K 8

Fox_threatintel @banthisguy9349

7 months ago

The life of Russian Ransomware operator's black basta. Being afraid of FSB extorting them for money and or forcing them to do cyber operations for them

6 21 107 19K 40

Download Image

Deutsche Telekom CERT @DTCERT

7 months ago

🚨 Telekom Security detected a major #vishing campaign against multiple targets in #Germany, likely related to a ransomware group. We are still analyzing, but here is what we know so far 🧵1/x

6 54 163 40K 64

Download Image

Intrinsec @Intrinsec

7 months ago

🚨 [New Report Alert!] Our CTI team just published: "Premium Panel: phishing tool used in longstanding campaigns worldwide." 👉 This report reveals insights into a phishing kit used in campaigns for over two years! 📅Read the full report here: intrinsec.com/premium-panel-…

1 13 22 3K 9

Nicolas Krassas @Dinosn

8 months ago

VolWeb: A digital forensic memory analysis platform meterpreter.org/volweb-a-digit…

0 54 139 7K 74

watchTowr @watchtowrcyber

8 months ago

we've released our "is it vulnerable?" mechanism and script for Fortinet's CVE-2024-55591 - we hope this helps 🫡 github.com/watchtowrlabs/…

4 56 170 16K 63

Austin Larsen @AustinLarsen_

8 months ago

🚨 New: Zero-day vulnerability CVE-2025-0282 in Ivanti Connect Secure VPN is being actively exploited, including by suspected 🇨🇳 China-nexus cyber espionage groups. Our team at @Mandiant in partnership with Ivanti just published our initial findings. 🧵 cloud.google.com/blog/topics/th…