Happy New Year from the arctic circle. Its natures fireworks in all their glory. 🤯 Happy 2025 y’all!!!!!

Success!! Incredible.

Will be ringing in the new year in Tromsø, Norway. Going to try our best to finally see the aurora borealis. Regardless Norway is breathtaking. ❤️

Taking it a bit deeper, we have a follow on specific to the actor behind WarmCookie, TA866 or Asylum Ambuscade. Great research tying a lot of data points together. blog.talosintelligence.com/highlighting...

Our latest is a deep dive into WarmCookie a new addition to the crimeware landscape. A new crimeware family emerges as another falls away, a pretty common narrative. blog.talosintelligence.com/warmcookie-a...

Early voted in Austin today. Took 15 mins and then I got a cheesesteak for lunch. Go vote and get yourself a treat. You deserve it for doing your part 🗳️

Looks like deepfakes are becoming more prevalent. The future is going to be dark if people are already way down the misinformation hole without deepfakes. Scams are already everywhere, this is going to make it so much worse. It’s only a matter of time before this becomes widespread. 😔

Unsuccessful trip to animal control for our lost cat, Franklin 😔 Only positive is animal control is close to Cuantas and I got eat some of the best tacos I’ve had in a while. It’s always the little things ❤️

Documentary on the incredible work we've done at Cisco Talos in #Ukraine to help keep the lights on is finally out. So much work went on behind the scenes to make this happen. Incredible to see the impact its had. Check it out. www.youtube.com/watch?v=5lio...

I started looking at this because a document uploaded to VT was similar to documents with Picasso loader and I thought it could be a new variant. It turns out there is generator MacroPack generating these docs. blog.talosintelligence.com/threat-actor...

One of the things I love about #Austin. My neighbor already has their full #Halloween decorations out. I love where I live, and wish I had that kind of initiative. 🎃👻 #lifegoals

Happy blue bonnet season y’all. 🪻🪻

Latest research from my team on Turla activity targeting NGOs supporting Ukraine. Great work as always, full details 👇

It’s New Year’s Day morning which means it’s time for my favorite holiday tradition. Watching the best, mostly forgotten, new years movie ever made. 200 Cigarettes. Paul Rudd at his best. Here we go 2024.

To me the biggest risk from AI was never how are the bad guys going to abuse it to create malware, it's how they are going to abuse it to steal the training data and models worth millions.

Latest research from our team. Great work as always uncovering a network of seemingly related dating apps as well as the analysis of the malicious apps we found from AridViper. Details 👇

My wife and I like to go big for Halloween. We really enjoy handing out treats and take it seriously. This year’s bag includes fun dip, an airhead, Rice Krispie treat, chocolate, and two dum dums. Made ~100 this year. Last year we ran out 🙃

Score of the day from Austin Record Convention. 🎶🎶🤘

(1/13) Do you know Geena Davis? This is Geena Davis. She's, in my opinion, the most impressive actress alive and not because of the excellent roles she played... but because of the one role that changed the direction of her life. Geena Davis started her career in the classic Tootsie as April Page.

Team published two blogs about some new Lazarus activity, including a new exploit added to their arsenal as well as a pivot to more open source tooling. Details blog.talosintelligence.com/lazarus-quit... blog.talosintelligence.com/lazarus-coll...

Finally made it to Vegas and headed straight to Vesta. The only decent coffee in Vegas. Getting ready for the chaos ahead at hacker summer camp. 😬

Commercial spyware gets most of the attention, but the mercenary landscape in general (i.e. hack for hire) is going to have increasing impacts on the overall landscape as time goes on, not just mobile platforms with commercial spyware. As long as there is a need, these groups are going to flourish.

Great research from @g0jirasan.bsky.social on driver abuse. Allowed actors to legitimately sign drivers with expired certificates. Follow on blog on malicious activity he found as well. Take a read below. Red Driver activity details - https://blog.talosintelligence.com/undocumented-reddriver/