blueteamsec !blueteamsec@infosec.pub

For [Blue|Purple] Teams in Cyber Defence - covering discovery, detection, r

---

Read more

Members

448

Posts

396

Active Today

13

Created

2 yr. ago

Moderators

---

win32-app-isolation: Tools and documentation for Win32 app isolation

openfire鉴权绕过漏洞原理解析 - Openfire Authentication Bypass Vulnerability Principle Analysis

Korean reporting on the Lazarus fake recruiter campaign implant

한국내 macOS 이용자를 노린 APT37 공격 등장 - APT37 attack targeting macOS users in Korea

Inside of the WASP's nest: deep dive into PyPI-hosted malware

Uncovering a New Activity Group Targeting Governments in the Middle East and Africa - Palo Alto Networks Blog

Resident Campaign

The Experience of Cybercrime in Georgia: Awareness, Victimisation and Reporting

Fragments of Cross-Platform Backdoor Hint at Larger Mac OS Attack

DoNot APT Elevates its Tactics by Deploying Malicious Android Apps on Google Play Store

Khashoggi’s widow sues Israeli firm over spyware she says ruined her life - In the lawsuit, Hanan Elatr says Saudi Arabia used NSO’s Pegasus spyware to track her and her husband’s whereabouts

China calls hacking report 'far-fetched' and accuses the US of targeting the cybersecurity industry

Swing VPN app is a DDOS botnet

The Nightmare of Proc Hollow’s Exe

Case Study: cracking a global Adversary-In-The-Middle campaign using a threat intelligence toolkit

Automating acquisition for incident response

Security Threat Insights Report Q1 2023 - notable malware campaigns, trends and techniques identified from customer telemetry in calendar Q1 2023

Shampoo: A New ChromeLoader Campaign

OnlyDcRatFans: Malware Distributed Using Explicit Lures of OnlyFans Pages and Other Adult Content

Cyber ​​attack by group UAC-0057 (GhostWriter) against the state organization of Ukraine using PicassoLoader and Cobalt Strike Beacon (CERT-UA#6852) - use Chrome translate