1/ Hi, I'm TProphet. I write the Telecom Informer for @2600.com. A lot of people have been asking me about www.nbcnews.com/politics/nat... given that I'm somewhat knowledgeable in the area. Here's my take: I'm kind of astonished that this is public, and it isn't normal that it would ever be.

The idea that joining NATO would make Ukraine an intolerable threat to Russia is absurd and Poland is demonstrating why: they were just hit by Russian munitions and yet because NATO makes them feel secure they are comfortable literally just calling a meeting rather than a kinetic response

since everyone seems to be talking “AI” these days—if you’re a reverse engineer, how are you using LLMs to aid your analysis, if at all? #reverseengineering #llm

"Every dollar of oil revenue reduction shrinks Russia’s fiscal cushion, increases reliance on debt issuance, and ratchets up the political pressure on Moscow," notes the CSIS Energy Security and Climate Change Program. Read more about a potential Russian oil surcharge: www.csis.org/analysis/rus...

What's happening with the Russian economy: ◾️ Automotive industry Sales of passenger cars and trucks have dropped due to high loan interest rates. Tens of thousands of vehicles are stuck at the car factories' warehouses with no buyers in sight⤵️

They also covered the People of Color in Cryptologic History honorees—like Wash Wong and Ralph Adams.

Fellow NSA - National Security Agency veterans. Look at what’s happened at the National Cryptologic Museum. They covered up with brown paper the photos of Women in American Cryptology. All in response to President Trump’s anti-diversity executive order.

me: “so you want to transition from IT to security. what do you wanna do in security?” person on the internet: “defense analyst…security analyst” me: “a security analyst can include soc, grc, ir, vulnerability assessment/management, etc. so, what do you wanna do in security?”

okay, serious question: why don’t enterprises mandate default adblockers for all users? would it not avoid headaches and a good chunk of credstealing/malware download opportunities?!

A Russia/Iran-backed coup of senior Assad regime officers seems to be underway in Damascus. If they’re successful, and they can prevent a conflict with the opposition forces, it will allow them a say in any negotiated settlement.

After annulling the first round of the presidential election, Romanian authorities have now raided a local man paying influencers to support the pro-Kremlin candidate--which is against the law in Romania. www.agerpres.ro/justitie/202...

international affairs genie: “hey, it’s almost the end of the year, how bout we all chill out and take a breather?” south korea: “lmao too late” france: “hold my beer”

well, this was interesting to say the least. a spectacularly failed “self coup”. www.aljazeera.com/news/2024/12...

For anyone interested in detection and prevention methods against Salt Typhoon intrusions targeting communication providers, here is a comprehensive guide: media.defense.gov/2024/Dec/03/...

It is the biggest con in cyber security, hands down. There is *no data* that it changes cyber security *outcomes.* I theorize that most people intuitively know this, but because "improving click rate" is easy to track (and game), many performatively champion it as a "good metric" for security.

ah, the joys of building hash tables that refuse to populate.

more fun malware to add to the reversing list

show opinions needed! last week i finally watched “dune: part two”, liked it, and now wondering about dune: prophecy. anyone watched it? is it a yay, nay, or meh?

Nearest Neighbor? Espionage. www.wired.com/story/russia... Salt Typhoon? Espionage. wapo.st/3CHK3dQ GRU’s use of Moobot? Espionage. www.justice.gov/opa/pr/justi... MSS hack of MSFT? Espionage. www.cisa.gov/sites/defaul... SolarWinds? Espionage. www.lawfaremedia.org/article/sanc...

hello, hi, happy #caturday! can we please bring back the chicken wings cat dance trend? pretty please? youtube.com/shorts/ETIs_...

Awesome research ! - The Nearest Neighbor Attack: How A Russian #APT Weaponized Nearby Wi-Fi Networks for Covert Access - @volexity.com - www.volexity.com/blog/2024/11... #cyberespionage

Check our our introductory post on Reverse Engineering a NES / Famicom game with Ghidra using the excellent NES decompiler plugin.

what!! this is neat. didn’t know they had a weekly newsletter on vulnerability research 🤩 blog.exploits.club/exploits-clu...

2024-11-22 (Friday) #XLoader / #Formbook: I've been fired by my non-existent HR department. At least I got a "salary-receipt.exe" bazaar.abuse.ch/sample/003b5... Tria.ge and Any.Run don't identify the malware, but Joe Sandbox does: www.joesandbox.com/analysis/156... Also runs in my lab just fine

This is wild. Time to mandate 2fa for WiFi. www.volexity.com/blog/2024/11...

anyone else with @cyberwarcon.bsky.social FOMO? have fun y’all 🥹 hope to join you next year 💕

We're hiring a Principal Intel Analyst in the UK. The work is onsite 3 days/week and requires a UK DV clearance. If you fit that description, it's some really cool work. www.google.com/about/career...

and speaking of advent calendars! this sounds like a lot of fun—advent of radare2 🤩 www.radare.org/advent/

truth is that the average cyber attack these days is anything but “sophisticated”. creds are literally found everywhere in various breaches and users have the bad habit to reuse them. then, it’s about some AD discovery and LOLbin type tool for lateral movement + privesc, and we all know how it ends.

Been a while since we've seen #macOS #malware abusing osacompile rather than plain osascript, but #Amos Atomic Stealer is nothing if not adaptable. SHA1: 51ef05c84eea3dde149a5dd3ea9916a824e95afc. A reminder that it's possible (didn't say easy 😅) to reverse compiled #applescript. s1.ai/fadedead

Quite an evening listening to @mikko.bsky.social open the Museum of Malware Art in Helsinki! Brilliant collection including the 2000 Iloveyou virus commemorated as a hanging collection

Det. Eng. Weekly Issue 93 is live! https://buff.ly/3UWj3xG * 💎 by Andrew VanVleet on resiliency in your detection stack * @anton1chuvakin.bsky.social on alert fatigue and reframing alert labeling to more than just false positives and true positives (more in thread..)

The alleged Phobos ransomware operator has been extradited from South Korea to the US and faces up to 20 years in prison. Read: hackread.com/russian-hack... #CyberSecurity #CyberCrime #Phobos #Ransomware

i’m not religious but i’ve always loved the idea of advent calendars. i’m thinking about building one for malware people. like, each day is a surprise new cool malware sample, a useful script, a writeup on a technique. 🤔

oh hai everyone, it’s been a minute since i’ve logged in here. where are all my malware/security research nerdsss?! 🤓💕

These past few weeks, I did a thing to try and organize my malware reverse engineering work: a framework that leverages MITRE ATT&CK tactics to guide an analyst through the workflow by looking at keywords and API/function patterns. I hope folks find it useful! cyb3rkitties.github.io/posts/malwar...

i have “look for the same people you follow on mastodon” fatigue.

bhahahahaha, this is hilarious. it also shows how much many old schoolers aren’t willing to let go of office politics and power.

hi hi, visiting from mastodon. here’s a cat pic because why not. do people use hashtags here? #cats