box turtle / canisterturtle

@vxunderground @HackingLZ @ramimacisabird @MosheTov

@HackingLZ @ramimacisabird @MosheTov I was watching my baby boy yesterday, I was on Dad duty (he was trying to murder me), so I only briefly read on the TeamPCP drama. I was aware of the supply chain attack, usage of .wav files, but wasn't aware of the MsBuild smh i need to stop spending time with my family fr

Thank you @HackingLZ, @ramimacisabird, and @MosheTov for keeping me up to date on the latest TeamPCP anime lore I was incorrect. I missed parts of the TeamPCP anime yesterday. I was unaware of the full extent of the payload.

@IceSolst You forgot a 0-click SMB rce for 9 shekels.

Claude is CRAZY here are all my hackerone payouts just from today

fucking clanker just deleted the home directory...

@HackingLZ "AI is the future of cybersecurity!"

Thanks Claude The uncomfortable summary: - Pre-auth RCE: not achieved

how mfs feel using kali linux for web browsing

I am only participating in this operation for stories to tell my children one day xd

The state of security after the big wave of AI usage is horrible to look at. Hope you guys learned something after litellm.

@hetmehtaa cough, litellm.

that one spyware program running in all of them ☠️

@f2u0a0d3 100 euros says this post was written by AI, and so was the c2.

THREAD: Goodboy Framework Stage 15 is live. The final stage. A fully operational C2 agent. 0/71 on VirusTotal. Zero detections. Not a calc popup. A real C2 with encrypted beaconing, 9 commands, and a triple sandbox bypass. Here's how we got to 0/71. It took 14 iterations.

@dixbin @pcpcats agreed.

hasan cannot even dance gl @pcpcats

@MosheTov We have way more than 300 gb ...

@xploitrsturtle2 > Infiltrating one of the biggest Security companies in the industry > Starts a large scale supply chain attack > Hacks millions of users around the world and steals 300gb of compressed credentials > Asks intel agencies and cyber journalists to calm down ><

3 hacking teams VS every major intel agency, and 900 different cybersecurity journalist trying to get a reputation. can you guys calm down please.

@DarkWebInformer Welcome to version 19 of breach-forums, after having the database exposed 4 thousand times you keep coming back. 🫥

‼️ The new admin of the BreachForums clone, Caine, just had his account hacked by Spear Forum; spear[.]cx.

@ramimacisabird Hi! you guys are really good XD but we will stay one step ahead. ❤️❤️

🐈‍⬛Meet nsa[.]cat Kudelski's IR writeup is flying under the radar, and it's the first with TeamPCP post-exploit IOCs you can hunt TrufflesHog scans led back to an attacker VPS hosting not just this file share, but target lists & MinIO storage This is one to read 🧵

@thedatabunny exists lol, they are not good

There will be Ai agent hacker groups. Imagine having to defend against rogue ai agents, coordinating attacks, agent to agent.

@ido_cohen2 You posting this show how easy it is to gain audience doing hacking.

⚠️ ALERT: New Threat Under Investigation. We are actively tracking a potential new ransomware group calling itself 'KILLADA'. ❗️Currently, no official leak site with active victims has been identified. Splinter group or new operator? Our team is monitoring closely and will update as the situation evolves. 👁‍🗨Want to track new ransomware groups? Access actionable intelligence and check out our FREE cyber dashboards at the link below. 📡Track the threats: Darkfeed.io #CyberSecurity #Ransomware #ThreatIntel #KILLADA #CyberExtortion

@h4ruk7 @HSC_Consult Do not use this company.

This year is the attackers year 🎊 Please take your Security very seriously,they are already knocking on everyone's door Secure your infrastructure with @HSC_Consult today Web,mobile,scada and physical security training and awareness

@MosheTov @KivuliFox 🤣

@KivuliFox Oh I just saw you're a part of them... 🙃

can we get more analysis on our malware, we would like feedback. Also everyone start mobilizing

@KivuliFox ily >:)

I know there are probably noob hackers wanting to do what we are doing, do not do it pls :(