blueteamsec

467 readers
19 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat@infosec.pub
listing: all - local
526
1
China calls hacking report 'far-fetched' and accuses the US of targeting the cybersecurity industry (apnews.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
527
1
Swing VPN app is a DDOS botnet (lecromee.github.io)
submitted 2 years ago by campuscodi@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
528
1
The Nightmare of Proc Hollow’s Exe (www.trustedsec.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
529
1
Case Study: cracking a global Adversary-In-The-Middle campaign using a threat intelligence toolkit (blog.sygnia.co)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
530
1
Automating acquisition for incident response (falconforce.nl)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
531
1
Security Threat Insights Report Q1 2023 - notable malware campaigns, trends and techniques identified from customer telemetry in calendar Q1 2023 (threatresearch.ext.hp.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
532
1
Shampoo: A New ChromeLoader Campaign (threatresearch.ext.hp.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
533
1
OnlyDcRatFans: Malware Distributed Using Explicit Lures of OnlyFans Pages and Other Adult Content (www.esentire.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
534
1
Cyber attack by group UAC-0057 (GhostWriter) against the state organization of Ukraine using PicassoLoader and Cobalt Strike Beacon (CERT-UA#6852) - use Chrome translate (cert.gov.ua)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
535
1
Evasive File Smuggling with Skyhook (www.blackhillsinfosec.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
536
1
Threat activity and vulnerabilities in Indonesia, Malaysia, Philippines, and Thailand | APNIC Blog (blog.apnic.net)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
537
1
Shuckworm: Inside Russia’s Relentless Cyber Campaign Against Ukraine (symantec-enterprise-blogs.security.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
538
1
Hijacking S3 Buckets: New Attack Technique (checkmarx.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
539
1
Russian National Arrested and Charged with Conspiring to Commit LockBit Ransomware Attacks Against U.S. and Foreign Businesses (www.justice.gov)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
540
1
Video-Based Cryptanalysis: Exploiting a Video Camera's Rolling Shutter to Recover Secret Keys from Devices Using Video of Their Power LED - demonstrate the application of video-based cryptanalysis by (www.nassiben.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
541
1
한글 문서 파일을 위장한 악성코드(Kimsuky) - Malicious code disguised as a Hangul document file (Kimsuky) (asec-ahnlab-com.translate.goog)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
542
1
다양한 주제를 이용하여 CHM 악성코드를 유포 중인 Kimsuky - Kimsuky spreading CHM malware using various topics (asec-ahnlab-com.translate.goog)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
543
1
BypassAV: This map lists the essential techniques to bypass anti-virus and EDR (github.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
544
1
RunInSandbox: a quick way to run/extract files in Windows Sandbox with a right-click on a file (www.systanddeploy.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
545
1
MSSQL linked servers: abusing ADSI for password retrieval (www.tarlogic.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
546
1
PoCs to help learning how to get SYSTEM privilege on Windows (github.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
547
1
Microsoft Response to Layer 7 Distributed Denial of Service (DDoS) Attacks (msrc.microsoft.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
548
1
ransomware-descendants: A repository dedicated to tracking ransomware families based on leaked builders. (github.com)
submitted 2 years ago by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink
549
1
Android GravityRAT goes after WhatsApp backups (www.welivesecurity.com)
submitted 2 years ago* (last edited 2 years ago) by digicat@infosec.pub to c/blueteamsec@infosec.pub
0 comments fedilink