Bryan
@r00tx.bsky.social
DFIR | Threat Hunting | Security Analyst | Liverpool & FC Dallas
Reposted by Bryan
what a terrible day to be literate
December 4, 2024 at 4:03 PM
what a terrible day to be literate
Interesting, Bluesky gave me the notification saying you redeemed my invite code 😅
Anyways, was just cool to see another trance fan! 🙂
Anyways, was just cool to see another trance fan! 🙂
July 20, 2023 at 1:51 PM
Interesting, Bluesky gave me the notification saying you redeemed my invite code 😅
Anyways, was just cool to see another trance fan! 🙂
Anyways, was just cool to see another trance fan! 🙂
Ayo that's wild. You snagged my invite posted on twitter and you're #trancefamily?! Crazy to see another trance fan lol
Welcome!
Welcome!
July 20, 2023 at 2:00 AM
Ayo that's wild. You snagged my invite posted on twitter and you're #trancefamily?! Crazy to see another trance fan lol
Welcome!
Welcome!
Reposted by Bryan
Crazy how beavers build these
June 22, 2023 at 2:15 PM
Crazy how beavers build these
Reposted by Bryan
Was just talking with someone on how we thought Clop would handle the whole MOVEit thing if it truly was them. We called that they’d put it on the victims to contact them lol
Too many victims here for Clop to handle reaching out to each one.
Too many victims here for Clop to handle reaching out to each one.
June 7, 2023 at 3:31 AM
Was just talking with someone on how we thought Clop would handle the whole MOVEit thing if it truly was them. We called that they’d put it on the victims to contact them lol
Too many victims here for Clop to handle reaching out to each one.
Too many victims here for Clop to handle reaching out to each one.
Reposted by Bryan
LOLBins illustrated...
June 4, 2023 at 8:50 PM
LOLBins illustrated...
Progress (Moveit) sent out an email to their possibly affected clients today which lead to the couple I saw today. I believe right now it’s limited to only data exfil, not 100% since it’s still early.
Gonna be watching this one closely though to see if RW groups start using it.
Gonna be watching this one closely though to see if RW groups start using it.
June 2, 2023 at 3:47 AM
Progress (Moveit) sent out an email to their possibly affected clients today which lead to the couple I saw today. I believe right now it’s limited to only data exfil, not 100% since it’s still early.
Gonna be watching this one closely though to see if RW groups start using it.
Gonna be watching this one closely though to see if RW groups start using it.
Already seeing some cases come into IR from this and these aren’t even ransomware cases yet.
June 2, 2023 at 2:25 AM
Already seeing some cases come into IR from this and these aren’t even ransomware cases yet.
Reposted by Bryan
This looks like it could be bad and could be the third mass-exploitation ransomware campaign of 2023.
https://www.bleepingcomputer.com/news/security/new-moveit-transfer-zero-day-mass-exploited-in-data-theft-attacks/
https://www.bleepingcomputer.com/news/security/new-moveit-transfer-zero-day-mass-exploited-in-data-theft-attacks/
New MOVEit Transfer zero-day mass-exploited in data theft attacks
Hackers are actively exploiting a zero-day vulnerability in the MOVEit Transfer file transfer software to steal data from organizations.
www.bleepingcomputer.com
June 1, 2023 at 3:36 PM
This looks like it could be bad and could be the third mass-exploitation ransomware campaign of 2023.
https://www.bleepingcomputer.com/news/security/new-moveit-transfer-zero-day-mass-exploited-in-data-theft-attacks/
https://www.bleepingcomputer.com/news/security/new-moveit-transfer-zero-day-mass-exploited-in-data-theft-attacks/