Peter Kruse | Cybercrime Research @peterkruse

Peter Kruse is a cybersecurity researcher. Co-founder of CSIS Security Group, Kruse Industries, SIE-Europe & Heimdal. CARO member. CISO at Clever. Denmark Joined January 2009

Tweets

13K
Followers

13K
Following

849
Likes

9K

Microsoft Threat Intelligence @MsftSecIntel

2 weeks ago

The financially motivated threat actor Storm-0501 has continuously evolved to achieve sharpened focus on cloud-based TTPs as their primary objective shifted from deploying on-premises endpoint ransomware to using cloud-based ransomware tactics. msft.it/6015sZ77J…

0 45 168 14K 58

ScamAdviser @scamadviser

4 weeks ago

🚨 From @WhatsApp to #TikTok, scams are trending 📈 🔗 lnkd.in/dg9RDduH A “dad” got a text from his “child.” A few chats later: “Bank’s frozen, can you send £1,020.50 for curtains & blinds?” 💸 Dad was ready to help… except his real child was 3 🦖 smashing toy dinos. 😂

1 2 7 1K 1

Download Video

ransomNews @ransomnews

4 weeks ago

⚠️ WinRAR 0day abused in phishing to deploy RomCom malware WinRAR’s zero-day flaw (CVE-2025-8088), fixed in v7.13, was used in phishing RAR files to drop executables into Startup folders, triggering RomCom malware on login. RomCom (aka UNC2596) is a Russia-linked group behind…

0 131 417 32K 187

Download Image

CyberWar - 싸워 @cyberwar_15

a month ago

North Korean 🇰🇵-linked hacking group APT37 concealed malware within JPEG image files to carry out attacks. genians.co.kr/en/blog/threat…

14 137 709 57K 361

Download Image

Microsoft Threat Intelligence @MsftSecIntel

a month ago

Microsoft Threat Intelligence uncovered a macOS vulnerability, tracked as CVE-2025-31199, that could allow attackers to steal private data of files normally protected by Transparency, Consent, and Control (TCC), such as caches used by Apple Intelligence. msft.it/6015sHUoS

7 67 176 85K 65

Brian Krassenstein @krassenstein

a month ago

BREAKING: In a move that’s straight out of an authoritarian’s playbook, Trump has just called on American news networks to lose their licenses. Trump is a danger to our democracy and free speech. 8647 - Congress must act.

3K 5K 18K 463K 514

Download Image

Grummz @Grummz

a month ago

The UK Online Safety act is out and causing havoc. The privacy and self doxing laws always claim they are about protecting children, but what it’s really doing is building a database of users personal info in a country that wants to arrest you for online speech. The Tea app…

978 4K 25K 32.5M 1K

ESET Research @ESETresearch

2 months ago

#BREAKING #ESETResearch has been monitoring the recently discovered #ToolShell zero-day vulnerabilities in #SharePoint Server: CVE-2025-53770 and CVE-2025-53771. SharePoint Online in Microsoft 365 is not impacted. welivesecurity.com/en/eset-resear… 1/5

3 45 105 10K 33

Microsoft Threat Intelligence @MsftSecIntel

2 months ago

Microsoft is sharing details from ongoing investigations of threat actors exploiting vulnerabilities targeting on-premises SharePoint servers. Linen Typhoon, Violet Typhoon, and Storm-2603 have been observed exploiting the vulnerabilities: msft.it/6015sE1p5

1 67 143 50K 35

SANS.edu Internet Storm Center @sans_isc

2 months ago

Hiding Payloads in Linux Extended File Attributes isc.sans.edu/diary/32116

0 24 60 7K 39

Download Image

Peter Kruse | Cybercrime Research @peterkruse

2 months ago

Flere browsere ramt af en 0 dags sårbarhed i en grafisk low level motor. Sårbarheden misbruges aktivt. Google har patchet hullet i Chrome men flere browsere står tilbage sårbare for nuværende, kruse.industries/l/0-dags-sarba…

0 1 1 825 0

Trend Micro Research @TrendMicroRSRCH

2 months ago

Organizations that use containerized applications may be vulnerable to recent attacks abusing exposed #Docker #APIs. Our research shows that threat actors are actively targeting cloud-reliant sectors such as technology, finance, and healthcare: ⬇️ research.trendmicro.com/4e6DhwM

0 3 2 714 1

Download Image

André Baptista @0xacb

2 months ago

DMARC can reveal more domains associated with a target. dmarc.live/info/<target-domain> allows you to find domains using the same DMARC record. Check it out 👇 There's also a python tool: github.com/Tedixx/dmarc-s…

10 209 1K 65K 1K

Download Video

cyberundergroundfeed @cyberfeeddigest

3 months ago

cc:@500mk500, @Huntio, @ViriBack, @drb_ra, @hasherezade,@ReversingLabs, @JAMESWT_MHT,@Arkbird_SOLG,@0xor0ne,@ESETresearch,@0x6rss ,@abuse_ch,@James_inthe_box,@peterkruse,@jstrosch,@HackersOIHEC

1 2 3 913 0

Hacking Team 3 @ht3labs

3 months ago

New blog post is out! We did some Windows reverse engineering here. Enjoy! ht3labs.com/Brokering-File…

1 38 126 14K 86

Johanna Nyman @JohannaNyman5

3 months ago

2K 11K 47K 1.4M 2K

Download Image

Threat and Risk Intelligence Services - eCrime.ch @ecrime_ch

4 months ago

New claim on the shame-site for #ransomware / #datatheft group #DATACARRY. Organization: alles Lægehus A/S Location: #Denmark Industry: #WellnessAndFitnessServices Staff: 51-200 employees Learn more at ecrime.ch

0 1 0 639 0

Logan Goins @_logangoins

4 months ago

I'm super happy to announce an operationally weaponized version of @YuG0rd's BadSuccessor in .NET format! With a minimum of "CreateChild" privileges over any OU it allows for automatic escalation to Domain Admin (DA). Enjoy your inline .NET execution! github.com/logangoins/Sha…

7 170 442 33K 208

Republicans against Trump @RpsAgainstTrump

4 months ago

Putin rejects a U.S.-Europe ceasefire proposal and Trump responds not by sanctioning Russia but by punishing our European allies with a 50% tariff. Whose side is he on?