Arnaud Zobec

Si vous travaillez sur des sujets similaires au mien (CTI), je vous invite à lire cet ouvrage de @LevystoneM . Étant profane en géopolitique, les rappels en début d'ouvrage sur l'histoire et les théories de l'Eurasie m'ont bien aidé. Et le reste est très bon et précis. Merci !

@_SaxX_ @Korben Et j'ai rencontré pas mal de profs qui font ce cours en étant axé sur des fake news, du genre un sujet à traiter (les USA et la lune par exple) avec une équipe qui fait l'article en utilisant tik tok, et un autre en utilisant des sources un peu plus académiques dira-t-on.

@_SaxX_ @Korben Ça existe déjà dans l'éducation nationale, et ça s'appelle l'éducation aux médias et à l'information je crois.

Encore une fois, voilà pourquoi les pays nordiques sont bien plus meilleurs que nous ! 💡❤️ Apprendre aux enfants à détecter les fake news et exercer leur esprit critique sur internet, qui désormais, regorge de fake news et deepfake en tous genres ! Quelle idée lumineuse de Finlande. On devrait tellement s'en inspirer pour avoir de telles choses en France et en Afrique ! C'est tellement primordial...

Cisco Talos Incident Response (Talos IR) recently observed an attacker conducting big-game hunting and double extortion attacks using the relatively new Interlock ransomware. Read the blog here: cs.co/6019SsMIh

@x0rz And you don't necessarly want to shutoff Threat Actors access instantly. You can monitor their activity yo ensure they have no other backdoors, or maybe it's a group that is doing something so APTish you may want to understand who it is and what's happening, or many other reasons

Well, tbh, it can be very challenging to understand where an attacker might be when you have no first clue. Removing a threat actor from your network in 7 days is not that bad.

A new suspected data theft campaign active since at least 2021, we attribute to "LilacSquid", a group that shares several keys TTPs with North Korean state-sponsored actors. Awesome work of my teammates, you should read it :) blog.talosintelligence.com/lilacsquid/

I finally took my ticket for @Botconf Who will come this year ? #botconf2024

#Turla targeting NGOs supporting Ukraine. See this last blogpost we worked on with colleagues.

Where are the NFT or blockchains based games in metaverse that everyone promised a couple of years ago, that will change tje world ? Was it a scam? Really ?! I'm shocked...

@fr0gger_ @sansforensics @Cyb3rWard0g @MsftSecIntel Awesome ! Congratz. This talk looks great !

📢Excited to announce that I'll be speaking at the next @sansforensics CTI Summit in DC this January with my friend and colleague @Cyb3rWard0g! We are going to share a unique perspective that will transform your approach to threat intelligence! 🤓 @MsftSecIntel #cti #infosec

Here’s a deeper look at what the team and I did to help Ukraine with its power grids. It was a privilege to lead the team who helped do this work. cs.co/6013RGxaL

@Glacius_ 0 efforts lol. They are using as subdomains their old domains lol

#Sidewinder #APT: Docx -> 5cc784afb69c153ab325266e8a7afaf4 RTF -> 43d35b5b20f491be219ab2eaa172ec55 Domain related: - mofa-gov-pk[.]donwloaded[.]com | 5.230.54.3 Another domain hosted on this IP that could be worth to check: - police-gov-bd[.]donwloaded[.]com

Cet auteur anonyme du Moyen Âge n’imaginait pas que son roman serait à l’honneur 700 ans après dans le métro parisien !!! @BellesLettresEd @ARTEfr @AAstierOff Le Chevalier au Dragon 🐉

This has been years in the making, literally. @Sebdraven and I are happy to announce the release of #Yeti 2.0 ✨ 🍰 (after we promised an EOM release at @hack_lu last month 😅) Website: yeti-platform.io Release: github.com/yeti-platform/… mini-🧵👇🏼

💻I've published a new blog post where I discuss practical use cases of LLM applied to threat intelligence. Check this out for a real talk about LLM usage for threat intelligence! 🤓 #infosecurity #threatintel #cybersecurity tomrocc.medium.com/applying-llms-…

@MichalKoczwara Nice catch.

Pivoting to find more APT Muddy Water related Infra 🇮🇷 37.120.237.204:443 37.120.237.248:443 146.70.124.102:443

Refreshed today, we see 74k devices exposing the WebUI on the Internet. #Cisco #CVE Cc @CERTCyberdef

An actor we're calling "ShroudedSnooper" is actively targeting telecommunications companies in the Middle East using a previously undiscovered #malware family. More details on this threat and how users can stay protected cs.co/6015PCxv1

@ashl3y_shen @TalosSecurity Welcome !

After 3 years at Google TAG, I'm delighted to announce an exciting new chapter in my career. I'm joining @TalosSecurity to conduct threat intelligence research and counter threat actors. Looking forward to collaborating with brilliant minds and growing in this new adventure.