blueteamsec

542 readers

24 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago

MODERATORS

501

3

Magecart Skimmer Analysis: From One Tweet to a Campaign (blog.himanshuanand.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

502

2

病毒伪装搜狗输入法，正规签名内嵌恶意脚本 - The virus disguises itself as Sogou Input Method, embedding malicious scripts in legitimate signatures (mp.weixin.qq.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

503

5

raw-disk-parser: A tool to interact with Windows drivers to perform a raw disk read and parse out target files without calling standard Windows file APIs (github.com)

submitted 1 month ago by digicat to c/blueteamsec

1 comments fedilink

504

2

sneaky_remap: A C and Go /proc/pid/maps cloak of invisibilty for shared object files (github.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

505

3

Analysis of APT-C-24 (Sidewinder) Recent LNK File Phishing Attacks (mp.weixin.qq.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

506

3

AI-Driven Deepfake Military ID Fraud Campaign by Kimsuky APT (www.genians.co.kr)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

507

3

Eternal-Tux: Crafting a Linux Kernel KSMBD 0-Click RCE Exploit from N-Days (www.willsroot.io)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

508

4

Sidewinder APT leverages Nepal protests to push mobile malware (strikeready.com)

submitted 1 month ago by campuscodi to c/blueteamsec

0 comments fedilink

509

4

Yurei the New Ransomware Group on the Scene (research.checkpoint.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

510

0

2025년 8월 APT 그룹 동향 보고서 - APT Group Trends Report for August 2025 (asec.ahnlab.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

511

1

2025년 8월 APT 공격 동향 보고서(국내) - APT Attack Trend Report for August 2025 (Domestic) (asec.ahnlab.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

512

3

Cyberspike Villager Cobalt Strike's AI-native Successor - "a Chinese-based pentesting framework that acts as an AI-powered framework in the style of Cobalt Strike" (www.straiker.ai)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

513

9

Insider threat of students leading to increasing number of cyber attacks in schools (ico.org.uk)

submitted 1 month ago by digicat to c/blueteamsec

1 comments fedilink

514

10

US Investment in Spyware Is Skyrocketing (www.wired.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

515

2

Ransomware Tool Matrix Update: Community Reports (blog.bushidotoken.net)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

516

6

Iran-linked hacker group doxes journalists and amplifies leaked information through AI chatbots (www.international.gc.ca)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

517

1

Cyber Criminal Groups UNC6040 and UNC63940 Compromising Salesforce Instances for Data Theft and Extortion (self.blueteamsec)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

https://www.ic3.gov/CSA/2025/250912.pdf

518

1

How the Infamous APT-1 Report Exposing China’s PLA Hackers Came to Be (www.zetter-zeroday.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

519

1

Modular PIC C2 Agents (reprise) (rastamouse.me)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

520

3

Old But Gold, Dumping LSASS With Windows Error Reporting On Modern Windows 11 (www.zerosalarium.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

521

1

Geedge & MESA Leak: Analyzing the Great Firewall’s Largest Document Leak (gfw.report)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

522

1

Treasury Sanctions Southeast Asian Networks Targeting Americans with Cyber Scams (home.treasury.gov)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

523

1

CTO at NCSC Summary: week ending September 14th.. (ctoatncsc.substack.com)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink

524

4

Behind the Curtain: Detecting Remote Employment Fraud Inside Your Organization (www.splunk.com)

submitted 1 month ago by Diluvian to c/blueteamsec

1 comments fedilink

525

7

MC1150118 - Microsoft Defender for Office 365: New records in Streaming API and Sentinel EmailEvents table - "will store both current and historical email verdicts and locations" (mc.merill.net)

submitted 1 month ago by digicat to c/blueteamsec

0 comments fedilink