ICSNick

Time to leave this platform. If you like to contact me professionally, find me on LinkedIn

@RusEmbSwe @MID_RF m.youtube.com/watch?v=NKHl2z…

🎄Новогоднее поздравление Посла России в Швеции С.С.Беляева 💬От имени всего коллектива Посольства искренне поздравляю вас с наступающим Новым годом! Пусть 2025 год принесет успехи во всех начинаниях! Желаю вам и вашим близким здоровья и благополучия! t.me/rusembswe/3607

@vxunderground @cr0nym 🙋🙋🙋🙋

Hello, Giveaway-number-???-we're-almost-done Our friend @cr0nym hooked us up with 3 vouchers for the Defense Security Linux Attack, Detection and Live Forensics course + 90 days lab access If you want to learn DFIR on Linux, leave a comment below. - Winners will be selected randomly in the next 24 hours. - We will DM winners. - If you do not confirm your win in 24 hours a new winner will be selected - If your DMs are closed, you automatically forfeit your prize

@vxunderground @PentesterLab Yes please

Whatever, fuck it, I don't give a shit anymore. I guess we're doing everything in the whole world now. I said no more, but here we go again. Our friends at @PentesterLab hooked us up with 10 vouchers for there Pro Plan for 6 months. It's in queue. - smelly smellington

@vxunderground @1336_0ff_by_0ne Buffer overflow please

Hello, giveaway_number++; Our friend @1336_0ff_by_0ne is hooking us up with 12 malware-themes t-shirt swags, thing. Sizes available are Medium, Large, and XL. No exceptions, sorry. These are the only sizes currently available. Comment below if you want: 1. BSOD 2. Buffer Overflow 3. Lumma Stealer 4. SocGholish - Winners will be selected randomly in the next 24 hours. - We will DM winners. - If you do not confirm your win in 24 hours a new winner will be selected - If your DMs are closed, you automatically forfeit your prize

@vxunderground @AlteredSecurity Sound awesome

Good morning, afternoon, or night. We're continuing giveaways. We're on number ??????? Our friends at @AlteredSecurity hooked us up with 5 vouchers for their Certified Red Team Professional course. See subsequent for course details. If you want to do cool red teaming hacker stuff, leave a comment below. - Winners will be selected randomly in the next 24 hours. - We will DM winners. - If you do not confirm your win in 24 hours a new winner will be selected - If your DMs are closed, you automatically forfeit your prize

@BuschEbba Sverige exporterar mer än dubbelt så mycket el jämfört med Finland men betalar mellan 16 till 32 gånger så mycket. Avsaknad av kärnkraft torde då vara den mindre delen av problemet utan hur prismodellen är konstruerad är systemfelet. Vart är självkritiken som högsta ansvarig?

Elprisernas berg- och dalbana är horribel. Imorgon blir det drygt 8 kr i södra Sverige mellan 17-18. Många andra timmar har vi extremt låga priser. Det är ett resultat av nedlagd kärnkraft. När det inte blåser får vi höga elpriser med detta misslyckade elsystem, vilket tyska elpriser på ca 10 kr/ kWh visar. Just därför gör vi allt för att bygga upp elsystemet igen. Grunden för ny kärnkraft är redan lagd, vi värnar vattenkraften. Därtill har vi beslutat om 50 åtgärder med bäring på nu till 2030 som gör att vi kan få ut mer effekt av all el som produceras. Den EU reglerade flödesbaserade kapacitetsberäkningsmodellen har många effekter. Däribland att mer el kan transporteras från norra till södra Sverige. Det är nödvändigt, särskilt givet södra Sveriges allvarliga brist på elproduktion i förhållande till konsumtion och nät.

@vxunderground @cyberwarfarelab

Hi, it's giveaway number ??? (we're almost half way there) Our friends at @cyberwarfarelab hooked us up with 5 vouchers for their Certified Exploit Development Professional course. If you wanna learn about about exploit development, leave a comment below. - Winners will be selected randomly in the next 24 hours. - We will DM winners. - If you do not confirm your win in 24 hours a new winner will be selected - If your DMs are closed, you automatically forfeit your prize Have a nice day

Hope to see you virtual there!

Did a 10 minute lightning talk at @SEC_T_org analyzing the an ESXi ransomware from the new group Cicada 3301 and how we see links to the debunked RaaS BlackCat. m.youtube.com/watch?v=E_WJ6C…

I am glad and humble that @BleepinComputer picked up the analysis I did with @WahlenPMattias regarding Cicada 3301 ransomware and possible connections to AlphV/BlackCat.

@WahlenPMattias and I we have done a deep dive into the new ransomware Cicada3301, including some possible connections to both ALPHV and the Brutus botnet. truesec.com/hub/blog/disse…

@micahk Would the show be called Between two Couches?

@jamieantisocial Go Jira Go!

when someone reopens a Jira ticket you previously resolved.

CrowdStrike pushes the ultimate security update. All computers become unhackable.

@rj_chap @a_olsson - On the proxy server we have Logscale or OMS agent to pushes it to either CrowdStrike or Sentinel

@rj_chap @a_olsson We have solved it like this. - Turn on audit log in ESXi - Configure it to send the syslog to a proxy server - In the proxy server we have built a filter that matches on log files or key words that we are interested in (the logs are very verbose)

Anyone have alt. methods for sending /var/log/(shell.log|crond.log|vmkwarning.log|sshd.log) from an ESXi host via syslog? This would make ongoing threat monitoring sooooo much easier in these environments. Anyone doing this? @IcsNick @a_olsson #Ransomware #RansomwareSucks

So LockBit = Booger Toilet Sniffer BlackBasta = Lumpy Toilet Head Play Ransomware = Doofus Gizzard Tush So @SwiftOnSecurity @GossiTheDog @rj_chap @TheDFIRReport @thegrugq @BushidoToken @cyb3rops as being CTI though leaders. Are you with me on silly mission?

So, Threat Intel community. I think we should change the way we name threat actors, from sound as villains to a more appropriate convention showing their true colors. My suggestion is that we turn to Captain Underpants “Professor Poopypants name change-o-chart 2000”

@rj_chap @TheQueenofELF Anytime. Would love to!

@IcsNick @TheQueenofELF Let's chat ransomware and ESXi!

Anders Olsson’s and my talk from Security Fest. Get insights how VMware/ESXi ransomware works, how to recover, how to do incident response and how to protect for it. Also how Captain Underpants can assist in Threat Intelligence. m.youtube.com/watch?v=Z7pmI7… #Truesec