Debug Majora

@Antonlovesdnb For sure! Will follow up

@debug_majora Sounds super cool, would love to see screenshots 🔥

Day 2 of #ClaudeForBlueTeam Building visuals and presentations using ATT&CK can be a pain. Prompt Claude to build an ATT&CK MCP for you - then load this ATT&CK MCP in Claude Desktop. Now you can ask Claude to generate executive briefings for you, using rich ATT&CK data.

@fr0gger_ great read 🙏🏼 I created something similar for Compromised Credentials (querying individual API’s -> aggregating the results -> a final verdict is provided) but your approach introduces some improvements I could introduce

@txhaflaire native dark mode out of the box 🔥 will deff check this out

Is ESLogger or Mac Monitor your friend for dynamic malware analysis on macOS? Then i've got something that might come to use! An browser based ES/Mac Monitor log analyzer with a lot of neat features like story timelines, Sigma rule matching, an in-depth process tree analyzer and much more and the neat thing is, nothing is uploaded to any backend! I'm looking for feedback! Take a look at es.decompiler.dev #macos #malware #reverseengineering #re #ThreatHunting #dfir

@Pred @OkisFN 🙏🏼🇧🇦

GGs C9 and to my Bosnian brother @OkisFN 🇧🇦 we win 3-1 💚🦅

@phalgooon 😭😭

first in my bloodline to create JIRA tickets 👍

@Gootloader @GoogleAds Ah I see. I remember working a case where we tracked the threat actors malvertising campaign via their advertiser profile/email (aka the profile they were using to serve their malicious ads). Not sure if that helps

@debug_majora @GoogleAds More like tracking malvertising

Anyone have a good way to monitor new @GoogleAds for a specific domain?

@GamingWithNep @PJ_Marcum agreed - not seeing the correlation either lol

@PJ_Marcum This was a typosquatted domain that was weaponized. Not sure if this is a bait post. This has been going on since the beginning of time.

First Notepad++ and now 7-zip. This shows why we need to limit apps installed on corporate devices to only things with a valid business justification.

@Mamba10x you were frying pa

GGs to Faze lost 2-3. Placed 4th first event and it’s only up from here. Thank you to everyone for the support and Sorry to the fans definitely not what we wanted. Back to the lab 🫡

@txhaflaire @malwrhunterteam thank you! and cheers I see one pointing to applelake[.]io/assets/files/AppleLake.dmg that i just grabbed #summary" target="_blank" rel="nofollow noopener">urlscan.io/result/019bf0b…

@debug_majora @malwrhunterteam Awesome work!! thanks for sharing @debug_majora

"AppleLake.dmg": 770b8602df1ed92bbe97172c9fb00b1d355a437449206d7bd9d6973c332f2955 🤷‍♂️

@txhaflaire @malwrhunterteam wrote a small blog on this updated campaign - seems to be spreading via Youtube ads/videos debug-majora.github.io/digitstealer/2…

@malwrhunterteam Digitstealer, most likely retrieved from applelake[.].org, the download is there provided through Dropbox.

@cyb3rops @nextronsystems this the way. Santa (aka now @northpolesec) does a great job at managing/implementing this for macOS.

At @nextronsystems we treat all RMM/remote tools the same - equally suspicious. We flag them all and let the analyst decide. They get a higher score when they’ve been renamed or found in an unexpected location.

@YanyaMx Vamos pa 🇲🇽

Quedamos Top 8 en la tabla general de hoy, esos puntos prácticamente nos aseguran a Winner Bracket en el mundial, vamos con todo mañana🇲🇽🫡

@banthisguy9349 sounds very similar to SpyClouds Investigations Portal/service. Even the same name lol

Threat actors be like:

@Enderman @rawsalerts for marketing purposes only, srs lol. Companies create distinct monikers for said threat actor which helps drive traffic to them (in this case Salt Typhoon which was coined by Microsoft)

@rawsalerts Why do these groups always have the most random names

🚨#BREAKING: Chinese hackers linked to the group known as Salt Typhoon have breached the email systems of U.S. congressional committee staff, gaining access to internal communications.

@futurewipes Any info on “Invisible”?

8. “invisible” 9. off dat (og) 10. tic tac (og)

all leaks/snippets from pluto x baby pluto 🚀 🪐 1. “astronauts”

@tuckner GreyNoise keeping their tradition going of proving quality community tools

This is so awesome

@A1Rated @jnmegatron fr😭🙏🏼

@jnmegatron Gwinn gotta put that away the rest of the year lmao

“snipers need GA’d! no skill, just hold an angle!!”