Av4x @_av4x

i like malware, cti, geopolitics, and khachapuri. Joined September 2022

Tweets

61
Followers

106
Following

570
Likes

1K

vx-underground @vxunderground

4 weeks ago

DoNt SuPpOrT tHe EfF tHeYrE wOkE aNd LeFtISt Okay. Well, we're trying to DO SOMETHING. If you don't like the EFF, then DO SOMETHING else. Do something. Do LITERALLY ANYTHING. If you genuinely care about privacy, your digital anonymity, and your right as a free-willed…

87 470 3K 95K 276

wukko @uwukko

a month ago

i’m really worried about the total lack of privacy in the future. barely anyone cares about it aside from a very small circle of nerds, so tech companies take advantage of that for their own profit and constantly lie about privacy without any repercussions

81 3K 17K 193K 1K

Team Cymru Threat Research @teamcymru_S2

4 months ago

Now that the cat is out of the bag regarding the use of front companies like BlockNovas LLC (blocknovas[.]com) in DPRK-linked #ContagiousInterview campaigns. We thought we'd share our overview of network telemetry surrounding this particular activity.

5 62 210 34K 111

Download Image

. @7N7

5 months ago

why are we giving 900 megs of logs this much traction? lol

JAMESWT @JAMESWT_WT

5 months ago

why are we giving 900 megs of logs this much traction? lol https://t.co/dZR3AtfAPi

2 29 142 31K 106

Download Image

6 5 61 12K 37

Download Video

Nick @superducktoes

6 months ago

north koreas offline this morning nkinternet.wordpress.com/2025/03/18/nor…

0 1 8 220 0

hithere @asdasd13asbz

6 months ago

#Kimsuky #APT VServer Tool DOWNLOAD : github.com/errbody/DPRK-R…

0 13 61 9K 18

Download Image

Nick @superducktoes

6 months ago

Someone having a bad day in North Korea. Whois records just updated

3 7 29 6K 8

Download Image

Av4x @_av4x

9 months ago

Well, well, well securelist.com/cloud-atlas-at…

Av4x @_av4x

10 months ago

Well, well, well securelist.com/cloud-atlas-at…

0 0 5 317 0

0 0 2 150 0

Av4x @_av4x

10 months ago

The volume of shit that ties back to the IT Workers is absurd.

0 0 2 74 0

SttyK✨💉👩‍⚕️(ｽﾃｨｯｷｰ) @SttyK

10 months ago

1 5 27 2K 4

Download Image

Av4x @_av4x

11 months ago

#DPRK #BeaverTail sample uploaded to GH last year by a potential IT Worker. C2: 144.172.123[.]189:8888 https://github[.]com/SuperDev313/test-challenge1/blob/master/gatsby/gatsby-node.js virustotal.com/gui/file/ab810…

0 0 1 150 0

Nick @superducktoes

12 months ago

one time i found a bunch of north korean data nkinternet.wordpress.com/2024/09/13/exp…

0 7 28 4K 14

Av4x @_av4x

a year ago

Low confidence potential #CitrineSleet domain: superfrogclub[.]com 92[.]119[.]88[.]226 Only based off same ASN, cert issuance/expiry, and naming schemes. No other ties

Microsoft Threat Intelligence @MsftSecIntel

a year ago

Low confidence potential #CitrineSleet domain: superfrogclub[.]com 92[.]119[.]88[.]226 Only based off same ASN, cert issuance/expiry, and naming schemes. No other ties

25 246 587 103K 149

0 0 2 181 0

Av4x @_av4x

a year ago

Potential #MoonstoneSleet/#Lazarus domains: i.wanblibang[.]com[.]cn lighterworld[.]one (currently dead) related to: microsoft.com/en-us/security…

0 0 2 130 0

Kim Zetter @KimZetter

2 years ago

Great excerpt from @ByronTau's new book - how the Pentagon learned to use targeted ad data to locate and track Putin and other targets wired.com/story/how-pent…

3 74 224 32K 63

Download Image

Mattias Wåhlén 🇪🇺🇺🇦🇨🇦 @WahlenPMattias

2 years ago

I would argue that the most significant event in cybersecurity in 2023 was the attack on two casinos in Nevada by the threat actor known as Octo Tempest and in this thread I will explain why. 🧵 /1