Infamous BreachForums Is Back Online With All Old Accounts and Posts Restored - cybersecuritynews.com/breachforums... #cybercrime

NEW: Data broker sites were allegedly used by the Minnesota shooting suspect, authorities claim, highlighting the danger of an industry that freely sells your personal information. @lhn.bsky.social reports www.wired.com/story/minnes...

We recently discovered an infostealer in our data that we originally dubbed "Aurotun," named for a misspelling of "autorun" in its strings. After collab w/ @intel471.bsky.social, @malwareindepth.com & others, we believe this malware is actually MonsterV2, a newer version of an existing infostealer.

Tu envoies des e-mails de phishing usurpant Le Monde ? @flrnd.bsky.social et @okami.bsky.social retrouvent ton adresse e-mail.

Very happy and proud that one of my "weekend research" has been exposed in an article from Le Monde. I had spent some time during my short unemployed period to dig into #Traffyque infrastructure. www.lemonde.fr/pixels/artic... #cybercrime #lemonde

New from 404 Media: the age of realtime deepfake fraud is here. Scammers in Nigeria are using realtime deepfakes to change their race, facial hair, gender, more to appear as someone else on video calls. Results very realistic now. Also tricking verification systems www.404media.co/the-age-of-r...

Spyware-infected apps are being used to target individuals and organizations worldwide who are tied to Uyghur, Tibetan and Taiwanese activities “considered by the Chinese state to pose a threat to its stability,” @suzannesmalley.bsky.social reports this morning.

From firmware dumps to wireless exploration — check out our latest dive into DVB receiver analysis and the hidden attack surface it exposes! www.synacktiv.com/en/publicati...

Weaver Ant, the Web Shell Whisperer: Tracking a Live China-nexus Operation - www.sygnia.co/threat-repor... #APT #longpersistence

The Grandoreiro malware operation is back up and running after some of its members were detained last year. Forcepoint has detected new large-scale phishing operations spreading the banking trojan to users in Europe and Latin America www.forcepoint.com/blog/x-labs/...

Pulling the Threads on the Phish of Troy Hunt - www.validin.com/blog/pulling... #cybercrime #phishing

Zscaler has spotted a new malware loader named CoffeeLoader, used in the wild since September of last year. The malware was used together and appears to bear similarities with SmokeLoader. www.zscaler.com/blogs/securi...

Following the discreet layoffs at Trend Micro at the end of last year, I am now incredibly proud to announce that I just joined the powerful forces of @proofpoint.com ! I feel very gifted and honored to start working with such an amazing team of researchers !

L'Assemblée nationale entame aujourd'hui l'examen de la loi narcotrafic et de ses backdoors. La mesure serait au mieux inefficace, au pire dangereuse, mais Bruno Retailleau s'y accroche, affirmant contre les évidences qu'il ne s'agit pas ni d'une backdoor, ni d'un affaiblissement du chiffrement.

If you miss Tweetdeck, or just want to be able to see multiple feeds at once - give deck.blue a try, it's awesome!

Interesting read on new technics used by cybercriminals to scam people and cash out stolen money - How Phished Data Turns into Apple & Google Wallets - krebsonsecurity.com/2025/02/how-... #cybercrime #scam #China #mobile

@shodanhq.bsky.social Awesome! Shodan History is back in the UI. Nice!!! Thank you. But I have a question regarding trends.shodan.io. all trends I do are stopping at October 2024. Why? Please make them to the current data again. I love it and need it. :)

Ukrainian hackers hit Gazprom contractor, crippling Russian energy infrastructure newsukraine.rbc.ua/news/ukraini...

This is really interesting and good work by Volexity. I'm not sure how many places are looking for this kind of abuse or have outright prevented it. As a provider finding this kind of abuse has got to be difficult too.

A lire absolument, pour ceux qui souhaitent comprendre l'ampleur de ce que les #databrokers obtiennent comme info sur les internautes. #adint #cybercriminalité #sensibilisation Merci #LeMonde pour cet excellent article. www.lemonde.fr/pixels/artic...

Secret Taliban records published online after hackers breach computer systems are not so secret anymore!

Zyxel has no plans to release patches for two zero-days under attack and is advising customers to replace vulnerable routers. The company says these devices have been “EOL for years” - but the devices are not on Zyxel’s EOL page, and some are still available to buy techcrunch.com/2025/02/05/r...

Sneaky! 🫣😶‍🌫️ #DPRK FERRET #macOS #malware has been tricking users into installing backdoors and trying to hide out behind fake Zoom, Chrome and Apple logd files. @philofishal.bsky.social @hegel.bsky.social s1.ai/Ferret

🚨To strengthen the #investigation and #detection capabilities of the Sekoia.io Threat Detection & Research (TDR) team, we are looking for a Senior Technical Threat Researcher! www.welcometothejungle.com/fr/companies... #CTI #DetectionEngineering

Hackers expose serious #Subaru security flaws that allow them to remotely start cars - www.techradar.com/vehicle-tech... #carsecurity #cybercrime #DFIR

Interesting read, well done @silentpush.bsky.social ! #cybercrime #hosting

An eye-opening blog post on ads-based tracking: « Everyone knows your location: tracking myself down through in-app ads » timsh.org/tracking-mys...

Hey everyone. We're hiring a Systems and Security Technical Lead @citizenlab.ca Come join us! It's an extraordinary place with extraordinary people ... and *extraordinary* security risks! Never a dull day, I can promise you that!! jobs.utoronto.ca/job/Toronto-...

Wiz Research Uncovers Exposed #DeepSeek Database Leaking Sensitive Information, Including Chat History - www.wiz.io/blog/wiz-res... #dataleak #AI #vulnerability

Never a better time for celebrating with the Internet Archive. Also, a reminder to visit your local booksellers to purchase hard copies of the ephemera that could disappear at any moment from the interwebs. #booksky

@kasperskylab.bsky.social has disclosed the details of over a dozen #vulnerabilities discovered in a #MercedesBenz MBUX infotainment system - securelist.com/mercedes-ben... #carsecurity #vulnerability

💰 Alors que Thalès propose des augmentations inférieures à l’inflation à ses salariés de base, ses top managers ont pu profiter du généreux plan attribué en 2020. #rediff l.linforme.com/52pzy...

Dans les tréfonds de New Lotus Web, un gigantesque réseau d'arnaque à la voyance en ligne. Une enquête de @untersin.gr à travers les décennies, qui raconte comment les "médiums à distance" sont passés du courrier à Internet www.lemonde.fr/pixels/artic...

Celle qui avait découvert un malware fascinant #babar open.substack.com/pub/pwned/p/...

15,000 #FortiGate #Firewalls Exposed: Massive Leak Includes #VPN Credentials - securityonline.info/15000-fortig... #cybercrime #dataleak #vulnerability

✨ Second batch of PhishingKit Yara rules for 2025! ✨ Rules for triage/detection of #phishing kits: 📌 AT&T 📌 PayPal 📌 SumUp 📌 SBB CFF FFS (SwissPass) 📌 Indonesiabaik.id This free and #OpenSource project is now: ✅ 7️⃣8️⃣7️⃣ Yara rules available! ✅ 2️⃣3️⃣0️⃣ Commits ✅ 5️⃣ years old -> github.com/t4d/Phishing...

Le FBI purge des milliers de machines infectées par un logiciel malveillant appartenant à des pirates pilotés par l’Etat chinois. Le DOJ remercie officiellement (c’est rare !) le parquet de Paris, la gendarmerie et l’entreprise française Sekoia, sans qui « l’opération n’aurait pas été possible »

Threat actors are exploiting a critical remote command execution vulnerability, tracked as CVE-2024-50603, in Aviatrix Controller instances to install backdoors and crypto miners.

A #hacking group linked to #Russian #intelligence has been observed leveraging seemingly legitimate documents from the #Kazakhstan #government as #phishing lures to infect and #spy on government #officials in #CentralAsia, according to researchers at Sekoia. cyberscoop.com/fancy-bear-k...

[French] Analyse d'un kit de #phishing MonCompteFormation (CPF) avec l'aide de stalkphish.io:: www.linkedin.com/pulse/analys...

LeMonde investigation finds that members of a French nuclear-armed submarine crew inadvertently shared sensitive information about the patrol schedule of the ship via the Strava workout app: www.lemonde.fr/videos/artic...

"Dur la reprise après plus de 2mois et demis dans une boîte à caca" : comment l'activité Strava de membres d'équipage imprudents permet de deviner les dates des patrouilles des SNLE, fragilisant la posture de dissuasion nucléaire française. Par @sebastienbourdon.bsky.social & @antoineschirer.fr

I was a bit bored this weekend... So here's a quick write-up on how I pivoted from one single SMS to more than 900 fraudulent phishing websites impersonating different brand such as @netflix.com and more. www.linkedin.com/posts/cperne... #cybercrime #phishing

Have you noticed that the amazing people behind our Bellingcat toolkit have taken the time to categorise tools by research topics? This includes a must read most used by Bellingcat staff list, have a look here: bellingcat.gitbook.io/toolkit/most...

Very useful, thanks a lot for sharing ! <3

Wow, je ne connaissais pas cette technique. Merci d'avoir partagé cette lecture absolument passionante ! #SearchEngines #Google #journalisme

#CSIRT #CERT #DFIR ;-)

CISA has an update on the allegedly Chinese intrusion at Treasury, says there’s “no indication” that other federal agencies have been hit.