blueteamsec

444 readers
26 users here now

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, response, threat intelligence, malware, offensive tradecraft and tooling, deception, reverse engineering etc.

founded 2 years ago
MODERATORS
digicat
listing: all - local
326
2
Graphican: Flea Uses New Backdoor in Attacks Targeting Foreign Ministries (symantec-enterprise-blogs.security.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
327
3
Dissecting TriangleDB, a Triangulation spyware implant (securelist.com)
submitted 2 years ago by udunadan to c/blueteamsec
0 comments fedilink
328
2
Unpacking RDStealer: An Exfiltration Malware Targeting RDP Workloads (www.bitdefender.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
329
2
BlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage Activities (www.recordedfuture.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
330
2
Tracing Ransomware Threat Actors Through Stylometric Analysis and Chat Log Examination (medium.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
331
2
CID Lookout: Unsolicited Smartwatches Received by Mail (www.cid.army.mil)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
332
1
win32-app-isolation: Tools and documentation for Win32 app isolation (github.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
333
1
openfire鉴权绕过漏洞原理解析 - Openfire Authentication Bypass Vulnerability Principle Analysis (mp-weixin-qq-com.translate.goog)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
334
0
Korean reporting on the Lazarus fake recruiter campaign implant (download.hauri.net)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
335
1
한국내 macOS 이용자를 노린 APT37 공격 등장 - APT37 attack targeting macOS users in Korea (www.genians.co.kr)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
336
4
Inside of the WASP's nest: deep dive into PyPI-hosted malware (blog.virustotal.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
337
1
Uncovering a New Activity Group Targeting Governments in the Middle East and Africa - Palo Alto Networks Blog (www.paloaltonetworks.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
338
3
Resident Campaign (www.esentire.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
339
1
The Experience of Cybercrime in Georgia: Awareness, Victimisation and Reporting (rusi.org)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
340
7
Fragments of Cross-Platform Backdoor Hint at Larger Mac OS Attack (bitdefender.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
341
2
DoNot APT Elevates its Tactics by Deploying Malicious Android Apps on Google Play Store (www.cyfirma.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
342
7
Khashoggi’s widow sues Israeli firm over spyware she says ruined her life - In the lawsuit, Hanan Elatr says Saudi Arabia used NSO’s Pegasus spyware to track her and her husband’s whereabouts (archive.ph)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
343
6
China calls hacking report 'far-fetched' and accuses the US of targeting the cybersecurity industry (apnews.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
344
5
Swing VPN app is a DDOS botnet (lecromee.github.io)
submitted 2 years ago by campuscodi to c/blueteamsec
1 comments fedilink
345
1
The Nightmare of Proc Hollow’s Exe (www.trustedsec.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
346
2
Case Study: cracking a global Adversary-In-The-Middle campaign using a threat intelligence toolkit (blog.sygnia.co)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
347
1
Automating acquisition for incident response (falconforce.nl)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
348
1
Security Threat Insights Report Q1 2023 - notable malware campaigns, trends and techniques identified from customer telemetry in calendar Q1 2023 (threatresearch.ext.hp.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
349
2
Shampoo: A New ChromeLoader Campaign (threatresearch.ext.hp.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
350
1
OnlyDcRatFans: Malware Distributed Using Explicit Lures of OnlyFans Pages and Other Adult Content (www.esentire.com)
submitted 2 years ago by digicat to c/blueteamsec
0 comments fedilink
view more: ‹ prev next ›