Vladimir Dashchenko

Terribly sad news. Sergey @Skvern0 left this world. He was one of the best APT hunters, absolutely passioned about fighting cybercrime. His YARA training was always sold out! And he was a GReAT person and friend Goodnight, mr. Alice. You’ll be missed. Rest in peace my friend 💔

Happy to see Moscow Central Circle (МЦК), part of the Moscow Metro system, is on @CISAgov website! cisa.gov/topics/critica…

Here we go! 0day exploits description by @oct0xor #operationtriangulation #thesascon2023

#iosTriangulation’s binary validator and @2igosha telling the most interesting details of investigation. Will we see those four 0days used? 🤔 #TheSAS2023

#IoSTriangulation latest report: securelist.com/triangulation-… However @2igosha will share additional details today at @TheSAScon #thesas2023

Welcome to #TheSAS2023

#StripedFly talk by @61ack1ynx. Just wow! Good old #thesas2023 securelist.com/stripedfly-per…

Our next blogpost on #iOSTriangulation (securelist.com/triangledb-tri…) is finally out. Today we are ready to share details about the final payload used in the attack, which is a #spyware implant that we dubbed #TriangleDB @bzvr_ @2igosha [1/3]

@sekoia_io @felixaime @ClearskySec @matomo_org Great catch! Congrats 👏

Why have your own reco script on your #wateringhole, when you can just use some off-the-shelf Analytics solution? 🧐 Following the @ClearskySec report, TDR discovered that #TortoiseShell used its own @matomo_org instance to fingerprint their visitors.

@icsk3n is there any victimology behind?

🐺🛡️New blog! We dive into an ICS/OT malware family that we've dubbed COSMICENERGY. mandiant.com/resources/blog…

Amazing news! @TheSAScon is back 😍😍😍

Hey everyone, this is my first tweet! We identified a backdoor we dubbed #Gopuram, the final payload in the #3CX attack. The threat actor (likely to be Lazarus) has deployed it to cryptocurrency companies. More details in this thread and on Securelist (securelist.com/gopuram-backdo…)

Besides that we've analyzed how CVE-2022-27228 (Remote Code Execution in Bitrix CMS “Polls, Votes” module) affected ICS computers in Russia, Belarus and Central Asia. Which is also quite interesting

We made a report "Threat landscape for industrial automation systems" in H2 2022. We decided to show statistical changes in ICS threat landscape for Russia separately from the rest of the world - one of the most interesting data Here's a full report ics-cert.kaspersky.com/publications/r…

Is there any chance to find alternatives for an expensive IDA Pro? There’s a cool post by @2igosha “How to train your Ghidra”. securelist.com/how-to-train-y…

Together with GReAT we've prepared an analysis of various activities that were observed in cyberspace in relation to the military conflict in Ukraine. Did a cyberwar happen? This is a simple question with a very complicated answer securelist.com/reassessing-cy…

Here are some of the tricks and methods I have seen used to gain that all important initial access to remote systems. Specifically, the unexpected and unusual tricks! ics-cert.kaspersky.com/publications/u…

Bravo! kaspersky.com/blog/is-avast-…

We've prepared ICS Cybersecurity predictions for 2023+ Ideologically and politically motivated insiders, degrading communications between law enforcement, failing trust relationships in supply chains for both products and services(including OEM) ics-cert.kaspersky.com/publications/r…

I know it’s really humiliating for GCHQ, but it’s hilarious