Drum Cult
banner
drumcult.bsky.social
Drum Cult
@drumcult.bsky.social
Everyone starts from point one

Shahanshah of DFIR
Reposted by Drum Cult
Our latest investigation…
‼️ Hidden Bear: The GRU hackers of Russia's most notorious kill squad

As The Insider discovered, Unit 29155, the Kremlin’s most notorious black ops squad, also fielded a team of hackers that tried to destabilize Ukraine before Russia’s full-scale invasion.
Hidden Bear: The GRU hackers of Russia’s most notorious kill squad
Russian GRU Unit 29155 is best known for its long list of murder and sabotage ops, which include the Salisbury poisonings in England, arms depot explosions in Czechia, and an attempted coup d’etat in ...
theins.press
May 31, 2025 at 9:13 PM
We published some cool adversary tradecraft in a blog here: cybercx.com.au/blog/keys-to... (there's also a TLP CLEAR advisory floating around).

MX hijacking is brutal - and bypasses all your enterprise controls.
Keys to the (SaaS) kingdom
During an investigation CyberCX became aware of a campaign consisting of multiple incidents associated with the same threat actor utilising domain registration hijacking to target financial technology...
cybercx.com.au
May 29, 2025 at 8:13 AM
Reposted by Drum Cult
The most interesting bit here is that the best Western gov cyber outfits overhauled their operational approach after the mid-10s to focus more on avoiding detection.

The era of the "factory ops" was too risky with the rise of threat intel.

Harder to reliably spot 2025's Regin, Careto, Flame, etc
NEW: More than a decade ago, Kaspersky discovered a mysterious "elite" hacking group it called Careto (aka “The Mask”), which then vanished and only resurfaced last year.

We can now reveal that the researchers who investigated it were confident that the Spanish government was behind it.
Mysterious hacking group Careto was run by the Spanish government, sources say | TechCrunch
The elusive hacking group Careto was never publicly linked to a specific government, but TechCrunch has learned researchers concluded privately that the Spanish government was behind the group.
techcrunch.com
May 26, 2025 at 7:55 AM
Reposted by Drum Cult
Still wondering… Why does Zoom have offices? 🤔😇😎
May 25, 2025 at 5:23 PM
Reposted by Drum Cult
Sensitive information about women and girls who have survived domestic abuse is now expected to be exposed through a data extortion incident impacting the British government’s Legal Aid Agency, potentially revealing their locations to abusers and in some cases requiring them to move homes.
‘Deep concern’ for domestic abuse survivors as cybercriminals expected to publish confidential refuge addresses
A data extortion incident impacting the British government’s Legal Aid Agency could have serious implications for vulnerable people.
therecord.media
May 21, 2025 at 3:10 PM
Reposted by Drum Cult
In a rare bit of good news for everyone, the number of new podcasts being created is going down. on.ft.com/4ihZp86 Presumably because everyone already has one
April 12, 2025 at 7:26 AM
Reposted by Drum Cult
So the reason Norfolk Island copped a dramatically higher tariff than the rest of Australia is two shipments of Timbaland boots from the Bahamas and some aquarium supplies from the UK that had their point of origin mislabeled or misrecorded.

www.theguardian.com/australia-ne...
April 4, 2025 at 3:53 AM
Reposted by Drum Cult
Real men don’t barricade women and children. Real men don’t threaten and intimidate. Real men don’t preach hate. Real men DO show respect, compassion & love. Real men are comfortable enough in who they are to celebrate the diversity of others. Brian Tamaki you are just a boy.
February 15, 2025 at 8:38 AM
Great to see our little report covered by @patrick.risky.biz and @metlstorm.risky.biz 💪
This week's show is up!

We talk about a DOGE staffer's links to The Com, Paragon firing Italy as a spyware customer and Thailand cutting power to scam compounds.

Then we do a deep dive on a terrific threat/DFIR report from CyberCX.

Video: www.youtube.com/watch?v=4bzL...

Audio: risky.biz/RB779/
Risky Business Weekly (779): DOGE staffer linked to The Com
YouTube video by Risky Business Media
www.youtube.com
February 14, 2025 at 9:47 PM
Reposted by Drum Cult
EXCLUSIVE: A potentially catastrophic ransomware attack on Costa Rica’s largest oil refinery last year was the first real-world test of the U.S. State Department’s new rapid response tool for cybersecurity incidents.

Only on @therecordmedia.bsky.social

therecord.media/state-depart...
Costa Rica refinery cyberattack was first deployment for new US response program, ambassador says
A recent ransomware attack on RECOPE, Costa Rica's state-run energy company, was the first real-world test for FALCON, a new State Department program for foreign incident response, a top diplomat tell...
therecord.media
January 17, 2025 at 6:40 PM
Reposted by Drum Cult
I sincerely hope that any Americans pining for Chinese social media because American social media is so repressive and censorious, or pining for the experience of an average person in China because average Americans are so poor, beaten down, and despairing never have to experience why they're wrong.
January 15, 2025 at 7:13 PM
Reposted by Drum Cult
WHOVILLE, Libya (Reuters) - The Grinch, and his loyalist bodyguard Max, broke out of the two-month siege of Mt. Crumpit. Once his convoy was hit by SANTA aircraft, the Grinch was captured and killed by pursuing Whoville units.
December 24, 2024 at 10:55 PM
Reposted by Drum Cult
Bashar al-Assad, the London Ophthalmologist?
December 8, 2024 at 6:42 AM
Reposted by Drum Cult
for whom the doom scrolls
December 3, 2024 at 5:08 AM
Reposted by Drum Cult
CTI is the cause of my brainrot but I really cooked on this #salttyphoon #telecomhack
November 26, 2024 at 10:18 PM
Reposted by Drum Cult
A quick update to say that i’ll be posting all my content to Milf Messenger which is crucially not an echo chamber and is *actually* the place where free speech, spirited debate, and the marketplace of ideas thrives
Bluesky is number 1.
November 17, 2024 at 12:01 PM
Reposted by Drum Cult
If Batman was a Santa, would he wear his hat like this, or like this
November 25, 2023 at 12:32 AM