Brian Krebs identified the real-world identity of Rey, a key administrator of Scattered Lapsus$ Hunters, a hacking group blamed for dozens of high profile hacks. The hacker, identified as a Jordanian teenager, agreed to be interviewed after Krebs tracked him down and contacted his father.

NEW: Myanmar has made a big show of destroying the notorious KK Park scam compound—even publishing a video of a steamroller driving over thousands of phones But new images show buildings are only destroyed in one area. Hundreds are left untouched and experts say the crackdown is mostly propaganda

Le géant de l’informatique HP annonce la suppression de 4 000 à 6 000 emplois d’ici 2028 du fait de l’IA

Charming Kitten exposed: spy unit led Iran’s surveillance for deadly plots - content.iranintl.com/secret-spy-u...

Incroyable histoire dévoilé par @theguardian.com : "Rise of the ‘porno-trolls’: how one porn platform made millions suing its viewers" www.theguardian.com/society/ng-i...

My thought of the day: all registrars should rethink their registration processes, so that automatic registration cannot be done that easily by cybercriminals. Some of them register hundreds of domains every day... #fightautomation #cybercrime

Well some people here asked me where the hell I have been. To make it short: lot of good work (not public), and getting separated from my wife. So, quite a hot-cold situation. Will try to come more often here and start spreading cybercrime/APT stuff again.

Infamous BreachForums Is Back Online With All Old Accounts and Posts Restored - cybersecuritynews.com/breachforums... #cybercrime

NEW: Data broker sites were allegedly used by the Minnesota shooting suspect, authorities claim, highlighting the danger of an industry that freely sells your personal information. @lhn.bsky.social reports www.wired.com/story/minnes...

We recently discovered an infostealer in our data that we originally dubbed "Aurotun," named for a misspelling of "autorun" in its strings. After collab w/ @intel471.bsky.social, @malwareindepth.com & others, we believe this malware is actually MonsterV2, a newer version of an existing infostealer.

Tu envoies des e-mails de phishing usurpant Le Monde ? @flrnd.bsky.social et @okami.bsky.social retrouvent ton adresse e-mail.

Very happy and proud that one of my "weekend research" has been exposed in an article from Le Monde. I had spent some time during my short unemployed period to dig into #Traffyque infrastructure. www.lemonde.fr/pixels/artic... #cybercrime #lemonde

New from 404 Media: the age of realtime deepfake fraud is here. Scammers in Nigeria are using realtime deepfakes to change their race, facial hair, gender, more to appear as someone else on video calls. Results very realistic now. Also tricking verification systems www.404media.co/the-age-of-r...

Spyware-infected apps are being used to target individuals and organizations worldwide who are tied to Uyghur, Tibetan and Taiwanese activities “considered by the Chinese state to pose a threat to its stability,” @suzannesmalley.bsky.social reports this morning.

From firmware dumps to wireless exploration — check out our latest dive into DVB receiver analysis and the hidden attack surface it exposes! www.synacktiv.com/en/publicati...

Weaver Ant, the Web Shell Whisperer: Tracking a Live China-nexus Operation - www.sygnia.co/threat-repor... #APT #longpersistence

The Grandoreiro malware operation is back up and running after some of its members were detained last year. Forcepoint has detected new large-scale phishing operations spreading the banking trojan to users in Europe and Latin America www.forcepoint.com/blog/x-labs/...

Pulling the Threads on the Phish of Troy Hunt - www.validin.com/blog/pulling... #cybercrime #phishing

Zscaler has spotted a new malware loader named CoffeeLoader, used in the wild since September of last year. The malware was used together and appears to bear similarities with SmokeLoader. www.zscaler.com/blogs/securi...

Following the discreet layoffs at Trend Micro at the end of last year, I am now incredibly proud to announce that I just joined the powerful forces of @proofpoint.com ! I feel very gifted and honored to start working with such an amazing team of researchers !

L'Assemblée nationale entame aujourd'hui l'examen de la loi narcotrafic et de ses backdoors. La mesure serait au mieux inefficace, au pire dangereuse, mais Bruno Retailleau s'y accroche, affirmant contre les évidences qu'il ne s'agit pas ni d'une backdoor, ni d'un affaiblissement du chiffrement.

If you miss Tweetdeck, or just want to be able to see multiple feeds at once - give deck.blue a try, it's awesome!

Interesting read on new technics used by cybercriminals to scam people and cash out stolen money - How Phished Data Turns into Apple & Google Wallets - krebsonsecurity.com/2025/02/how-... #cybercrime #scam #China #mobile

@shodanhq.bsky.social Awesome! Shodan History is back in the UI. Nice!!! Thank you. But I have a question regarding trends.shodan.io. all trends I do are stopping at October 2024. Why? Please make them to the current data again. I love it and need it. :)

Ukrainian hackers hit Gazprom contractor, crippling Russian energy infrastructure newsukraine.rbc.ua/news/ukraini...

This is really interesting and good work by Volexity. I'm not sure how many places are looking for this kind of abuse or have outright prevented it. As a provider finding this kind of abuse has got to be difficult too.

A lire absolument, pour ceux qui souhaitent comprendre l'ampleur de ce que les #databrokers obtiennent comme info sur les internautes. #adint #cybercriminalité #sensibilisation Merci #LeMonde pour cet excellent article. www.lemonde.fr/pixels/artic...

Secret Taliban records published online after hackers breach computer systems are not so secret anymore!

Zyxel has no plans to release patches for two zero-days under attack and is advising customers to replace vulnerable routers. The company says these devices have been “EOL for years” - but the devices are not on Zyxel’s EOL page, and some are still available to buy techcrunch.com/2025/02/05/r...

Sneaky! 🫣😶‍🌫️ #DPRK FERRET #macOS #malware has been tricking users into installing backdoors and trying to hide out behind fake Zoom, Chrome and Apple logd files. @philofishal.bsky.social @hegel.bsky.social s1.ai/Ferret

🚨To strengthen the #investigation and #detection capabilities of the Sekoia.io Threat Detection & Research (TDR) team, we are looking for a Senior Technical Threat Researcher! www.welcometothejungle.com/fr/companies... #CTI #DetectionEngineering

Hackers expose serious #Subaru security flaws that allow them to remotely start cars - www.techradar.com/vehicle-tech... #carsecurity #cybercrime #DFIR

Interesting read, well done @silentpush.bsky.social ! #cybercrime #hosting

An eye-opening blog post on ads-based tracking: « Everyone knows your location: tracking myself down through in-app ads » timsh.org/tracking-mys...

Hey everyone. We're hiring a Systems and Security Technical Lead @citizenlab.ca Come join us! It's an extraordinary place with extraordinary people ... and *extraordinary* security risks! Never a dull day, I can promise you that!! jobs.utoronto.ca/job/Toronto-...

Wiz Research Uncovers Exposed #DeepSeek Database Leaking Sensitive Information, Including Chat History - www.wiz.io/blog/wiz-res... #dataleak #AI #vulnerability

Never a better time for celebrating with the Internet Archive. Also, a reminder to visit your local booksellers to purchase hard copies of the ephemera that could disappear at any moment from the interwebs. #booksky

@kasperskylab.bsky.social has disclosed the details of over a dozen #vulnerabilities discovered in a #MercedesBenz MBUX infotainment system - securelist.com/mercedes-ben... #carsecurity #vulnerability

💰 Alors que Thalès propose des augmentations inférieures à l’inflation à ses salariés de base, ses top managers ont pu profiter du généreux plan attribué en 2020. #rediff l.linforme.com/52pzy...

Dans les tréfonds de New Lotus Web, un gigantesque réseau d'arnaque à la voyance en ligne. Une enquête de @untersin.gr à travers les décennies, qui raconte comment les "médiums à distance" sont passés du courrier à Internet www.lemonde.fr/pixels/artic...

Celle qui avait découvert un malware fascinant #babar open.substack.com/pub/pwned/p/...

15,000 #FortiGate #Firewalls Exposed: Massive Leak Includes #VPN Credentials - securityonline.info/15000-fortig... #cybercrime #dataleak #vulnerability

✨ Second batch of PhishingKit Yara rules for 2025! ✨ Rules for triage/detection of #phishing kits: 📌 AT&T 📌 PayPal 📌 SumUp 📌 SBB CFF FFS (SwissPass) 📌 Indonesiabaik.id This free and #OpenSource project is now: ✅ 7️⃣8️⃣7️⃣ Yara rules available! ✅ 2️⃣3️⃣0️⃣ Commits ✅ 5️⃣ years old -> github.com/t4d/Phishing...

Le FBI purge des milliers de machines infectées par un logiciel malveillant appartenant à des pirates pilotés par l’Etat chinois. Le DOJ remercie officiellement (c’est rare !) le parquet de Paris, la gendarmerie et l’entreprise française Sekoia, sans qui « l’opération n’aurait pas été possible »

Threat actors are exploiting a critical remote command execution vulnerability, tracked as CVE-2024-50603, in Aviatrix Controller instances to install backdoors and crypto miners.

A #hacking group linked to #Russian #intelligence has been observed leveraging seemingly legitimate documents from the #Kazakhstan #government as #phishing lures to infect and #spy on government #officials in #CentralAsia, according to researchers at Sekoia. cyberscoop.com/fancy-bear-k...

[French] Analyse d'un kit de #phishing MonCompteFormation (CPF) avec l'aide de stalkphish.io:: www.linkedin.com/pulse/analys...

LeMonde investigation finds that members of a French nuclear-armed submarine crew inadvertently shared sensitive information about the patrol schedule of the ship via the Strava workout app: www.lemonde.fr/videos/artic...