Cyrus Robinson

Episode 77 "Operational Realities of SOAR: Automate and/or Enrich, Playbooks, Magic" of Cloud Security Podcast where hosts @anton_chuvakin and @_TimPeacock interview Cyrus Robinson (@afcyrus) @ingallsinfosec about the reality of #SOAR today cloud.withgoogle.com/cloudsecurity/…

#Opendir #Phishingkit Victims: @EastCarolina Actors: rosetaylor4444@gmail.com Richardsmith292929@protonmail.com richardsmith292929@yandex.com Sender Domain: studentsecuedu66932.onmicrosoft.com Kit: hXXps://tapettiwallpaper[.]com/EM365%20(2).zip

We're excited to welcome our new interns as they embark upon their Cybersecurity careers & begin to gain hands-on experience in the industry! Xavier Ellis bit.ly/3nrukWp Mariel Klosterman bit.ly/3CjMcGQ #cybersecurity #infosec #intern2021 #SecOps

🎉 We now offer live analysis every day of the year, 24 hours a day! ✅ 100% US-based Security Operations Center! Learn more here: blog.iinfosec.com/ingalls-securi… #soc #cybersecurity #incidentresponse #mdr #infosec #secops

@ingallsinfosec 🐿️🧇

❗Critical Advisory Notice for #SquirrelWaffle & #Qakbot 📣 New findings by our #SOC 🤓 Read Cyrus' writeup ✅ Download the list of #IoCs bit.ly/3DxJvCh #cybersecurity #malware #alert #MDR

@BushidoToken Do you happen to have a screenshot or sample of the original email that this came from?

☣ New wave of #Trickbot w/ tot43 gtag 45.89.127[.]240/tot43/ 103.102.220[.]50:443/tot43/ 36.95.27[.]243:443/tot43/ 6c2ed51eb9e7160b9ab6a6a9ae8fdc1b ecd39fca6f8a0b09cc07f025aa4664a1 Src:(app.any.run)

@p5yb34m Do you happen to have a screenshot or sample of the original email that this came from?

#Trickbot .dll (rob60 botnet): ://www.chipmania.it/mails/open.php .xls Sample: bazaar.abuse.ch/sample/e3d694e… .dll Sample: bazaar.abuse.ch/sample/aa7931e… Malware Config (C2s): tria.ge/210219-61w8cm8…

@executemalware Do you happen to have a screenshot or sample of the original email that this came from?

I received 8 #trickbot emails today. Very similar to what I've seen for the past few days now. gtag: rob60 Here are the IOCs: pastebin.com/HYyh2heQ

@James_inthe_box Do you happen to have a screenshot or sample of the original email that this came from?

Incoming #trickbot #malspam campaign, subject: Invoice Changes <digits> inv- .xls dll hash: 5af074c9bec5f91119e5deac1964207a c2's 201.20.118.122 123.200.26.246

@EdgyinchinaJim @KartikayM Sometimes servers are accidentally exposed because of a mistake, but these types of breaches often occur without the servers being directly web-exposed.

@KartikayM The biggest question is: WHY are these important and critical servers accessible on the internet in the first place ? ? ? Wouldn't it be prudent to keep them OFF of the internet ?????

🧵Hackers are targeting universities’ sensitive coronavirus research and holding it for ransom. Inside one school’s weeklong negotiations to free its servers bloomberg.com/news/features/… via @BW (1/7)

@KartikayM @BW "With the affect of a used-car salesman" is spot on with the "Operators" having to check with their managers to approve deals being negotiated.