⚠️ 𝗜𝗻𝘁𝗲𝗿𝗲𝘀𝘁𝗶𝗻𝗴 𝗼𝗻𝗲 𝗳𝗼𝗿 𝗳𝗲𝗹𝗹𝗼𝘄 𝗱𝗲𝗳𝗲𝗻𝗱𝗲𝗿𝘀.
A domain registered just 𝟭𝟯 𝗱𝗮𝘆𝘀 𝗮𝗴𝗼, closely resembling a Microsoft Copilot FQDN. VirusTotal at capture time: 𝟬/𝟵𝟮 𝗱𝗲𝘁𝗲𝗰𝘁𝗶𝗼𝗻𝘀.
Sharing for awareness. 🛡️
#ThreatHunting
1
1
5
301
I built an open-source AI agent that turns raw threat intel into deployable SIEM detections (0.750 on CTI-REALM benchmark) dlvr.it/TVzYcR #cyber #threathunting #infosec
1
5
1,230
The payload uses EtherHiding to fetch next-stage instructions from public Polygon blockchain RPC nodes, a compromised site carrying an injected script.
@_AkatsukiLegion @skocherhan @JAMESWT_WT @malwrhunterteam @500mk500
#windowsclickfix #ThreatHunting
1
5
114
nimcrypt: Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender. dlvr.it/TVzWNC #cyber #threathunting #infosec
1,094
DarkSpectre - a Chinese state-sponsored threat actor, maintains persistent access to enterprise environments by weaponizing legitimate browser extensions after establishing a trusted user base. dlvr.it/TVzPv9 #cyber #threathunting #infosec
2
2
5
1,256
APT-C-36 uses a new loader to carry out attack activities. dlvr.it/TVyqzY #cyber #threathunting #infosec
2
1,742
🚫 Web Malware Scan Results
Website: demo-tailwind-sooty[.]vercel[.]app
Security Verdict: CONFIRMED SCAM
Full analysis & details:
scanmalware.com/result/8bc50…
#Exploit #ThreatHunting #Hackers #PurpleTeam #DigitalSecurity
1
75
Anonymous🐾🐈⬛ retweeted
GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware dlvr.it/TVykfs #cyber #threathunting #infosec
1
1,603
Attackers didn't just steal data—they created backdoors. In some tenants, they exploited a secondary Teams app to grant themselves Global Admin rights and inject malicious credentials lasting until 2028. #ThreatHunting #EntraID #BlueTeam
8
الحمدلله
I'm happy to share that I've earned the eCTHP (Certified Threat Hunting Professional) certification from @INEsecurity
#INE #eCTHP #ThreatHunting #Cybersecurity
9
49
1,677
🚫 Web Malware Scan Results
Website: sp20ct10-tavleko-biz-munari[.]pages[.]dev
Security Verdict: CONFIRMED SCAM
Full analysis & details:
scanmalware.com/result/6c2a8…
#ThreatHunting #DataSecurity #GRC
1
33
🔱 retweeted
Logs. Processes. Open Ports. Hunt Suspicious Activity from one Terminal ( Localhost )
#LinuxSecurity #ThreatHunting #CyberSecurity
8
54
1,929
How AI Supercharged a 72-Hour Cloud Attack: Inside the Investigation - or written another way AI slower than most ransomware crews dlvr.it/TVyFNP #cyber #threathunting #infosec
1
1,815
Anonymous🐾🐈⬛ retweeted
Recovering Active ADFS Signing Keys via Machine DPAPI dlvr.it/TVxYfZ #cyber #threathunting #infosec
1
3
1,782
🚫 Web Malware Scan Results
Website: sp18ct10-burnok-biz-zivelo[.]pages[.]dev
Security Verdict: CONFIRMED SCAM
Full analysis & details:
scanmalware.com/result/67889…
#OnlineSafety #ThreatHunting #RiskManagement
22
Actor deploys #Sliver via psexec. psexec ineffective against Linux telecom gateways. SMB/Web requires creds, cmdkey/net use failed. High-integrity Windows sessions maintained. Distributing winupd.exe, .winupd.exe, and T-美国老白20个.
#threathunting
1
1
4
366