Interesting to see the defacement of the doge.gov website. Even though its kind of jokey, giving the position Elon is in it must be considered hacktivism.

Taking "hacking" back to its roots.

#DailyCyberWriteup today focuses on threat actors exploiting the popularity of DeepSeek. We saw this when ChatGPT became popular and is a common technique seen whenever a new applications rise in popularity. Researchers has seen domains mimicking DeepSeek that leads to Malware.

Mitigation 🧵:

My 📕 #DailyCyberWriteup is about the techniques used by the Cl0p ransomware group:
▶️ The group leverages double extortion tactics
▶️ Evades detection detection with several techniques:
↪️ Process injection, Indicator removal, DLL Side-loading, Shadow Copy Deletion.

🧵Remediation: ⏬

Beginning my 📕 #DailyCyberWriteup series where I’ll read a new cybersecurity writeup each day and break down the main points I learned. The main focus of the writeups will be either CTI related: New threat, actors and techniques. Or broader topics around cyber trends and -risks.

#phishing

Active phishing campaign targeting "Israel Credit Company"

Filling in the boxes leads to a MFA-code harvester for the page.

Be wary!

#booking.com #phishing

Seeing a bunch of these captcha scams imitating booking.com sites. Powershell command and patterns below: