@AZobec

TI Analyst | Musician | Hippie 2.0 | gamer | pour la neutralité du net ! - Tweets are my own. #ForTheAlliance

 Paris
Joined June 2011
  • Tweets1.3K
  • Following662
  • Followers719
209Media
Arnaud Zobec retweeted
Ivan Kwiatkowski@JusticeRageOct 15
I just released some new research on an unknown MikroTik backdoor compiled for TILE-Gx. IDA Pro couldn't even open the file! I think there's more to find, would love to get more eyes on this implant. Really excited about this research! xitter.cf/VirLabs_AI/status/2110…
VirLabs@VirLabs_AIOct 15
New VirLabs research: Tessera, an undocumented backdoor targeting MikroTik RouterOS on TILE-Gx. The samples had 0 detections on VirusTotal. Underneath a small launcher and wrapper sits a fairly sophisticated remote-control implant. virlabs.ai/blog/tessera/

Tessera: reverse-engineering a backdoor on forgotten silicon | VirLabs

The discovery of an unknown malware family affecting MikroTik CCR1000 routers. Unpacking it reveals file transfer, process execution, layered encryption, and cleanup, but leaves its deployment and...

virlabs.ai
2
18
2,028
Danfoss, Dixell, <insert here whatever brand or object you want> . Problem is very often the same. PLEASE don't expose your managements panel on the internet. Please. I have enough work to do with usual bad guys lol
2
4
499
Have you heard about spring cleaning ? Why not take the opportunity to : - patch your things - remove your exposed management's panels from the internet - test your backups Trust me, you'll avoid a lot of trouble.
1
69
Si vous travaillez sur des sujets similaires au mien (CTI), je vous invite à lire cet ouvrage de @LevystoneM . Étant profane en géopolitique, les rappels en début d'ouvrage sur l'histoire et les théories de l'Eurasie m'ont bien aidé. Et le reste est très bon et précis. Merci !
Levystone Michaël@LevystoneM16 Oct 2025
🚨 Parution aujourd'hui de mon nouveau livre : Géopolitique de l'Eurasie ! #russia #china #india #centralasia #caucasus #ukraine #belarus #moldova #pakistan #afghanistan #iran #turkiye lecavalierbleu.com/livre/geo…

Géopolitique de l'Eurasie - Le Cavalier Bleu

Depuis le « Grand Jeu » au XIXe siècle et les théories de ­Mackinder au début du XXe, l’Eurasie s’est imposée comme une donne géopolitique majeure.

lecavalierbleu.com
1
4
172
Cisco Talos Incident Response (Talos IR) recently observed an attacker conducting big-game hunting and double extortion attacks using the relatively new Interlock ransomware. Read the blog here: cs.co/6019SsMIh
13
1
21
3,100
A new suspected data theft campaign active since at least 2021, we attribute to "LilacSquid", a group that shares several keys TTPs with North Korean state-sponsored actors. Awesome work of my teammates, you should read it :) blog.talosintelligence.com/l…

LilacSquid: The stealthy trilogy of PurpleInk, InkBox and InkLoader

Cisco Talos is disclosing a new suspected data theft campaign, active since at least 2021, we attribute to an advanced persistent threat actor (APT) we’re calling “LilacSquid.”  Multiple TTPs...

blog.talosintelligence.com
7
12
2,943
I finally took my ticket for @Botconf Who will come this year ? #botconf2024
2
328
#Turla targeting NGOs supporting Ukraine. See this last blogpost we worked on with colleagues.
Cisco Talos Intelligence Group
@TalosSecurity15 Feb 2024
The #Turla APT is back with a new backdoor, very similar to its previous "TinyTurla" tool. Read more about what this Russian state-sponsored actor is up to now cs.co/6018Vf8ls
2
3
11
815
Where are the NFT or blockchains based games in metaverse that everyone promised a couple of years ago, that will change tje world ? Was it a scam? Really ?! I'm shocked...
2
5
487
Arnaud Zobec retweeted
Joe@ImmortanJo34 Dec 2023
Here’s a deeper look at what the team and I did to help Ukraine with its power grids. It was a privilege to lead the team who helped do this work. cs.co/6013RGxaL

Project PowerUp – Helping to keep the lights on in Ukraine in the face of electronic warfare

Project PowerUp is the story of how Cisco Talos worked with a multi-national, multi-company coalition of volunteers and experts to help “keep the lights on” in Ukraine, by injecting a measure of...

blog.talosintelligence.com
8
19
2,002
Cet auteur anonyme du Moyen Âge n’imaginait pas que son roman serait à l’honneur 700 ans après dans le métro parisien !!! @BellesLettresEd @ARTEfr @AAstierOff Le Chevalier au Dragon 🐉
4
11
66
4,123
Arnaud Zobec retweeted
tomchop@tomchop_14 Nov 2023
This has been years in the making, literally. @Sebdraven and I are happy to announce the release of #Yeti 2.0 ✨ 🍰 (after we promised an EOM release at @hack_lu last month 😅) Website: yeti-platform.io/ Release: github.com/yeti-platform/yet… mini-🧵👇🏼
Screenshot of the Yeti interface showing data for the Scattered Spider intrusion set.

ALT Screenshot of the Yeti interface showing data for the Scattered Spider intrusion set.

6
51
2
102
27,795
21
6,433
265
25,678
867,006
💻I've published a new blog post where I discuss practical use cases of LLM applied to threat intelligence. Check this out for a real talk about LLM usage for threat intelligence! 🤓 #infosecurity #threatintel #cybersecurity tomrocc.medium.com/applying-…

Applying LLMs to Threat Intelligence

A Practical Guide with Code Examples

blog.securitybreak.io
11
73
2
213
35,792
Arnaud Zobec retweeted
@onyphe.io@onyphe17 Oct 2023
Refreshed today, we see 74k devices exposing the WebUI on the Internet. #Cisco #CVE Cc @CERTCyberdef
CERT-FR
@CERT_FR17 Oct 2023
⚠️Alerte CERT-FR⚠️ La vulnérabilité CVE-2023-20198 affectant l'interface Web de IOS XE est activement exploitée. Elle permet à un attaquant non authentifié de prendre le contrôle de l'équipement. Aucun correctif n'est disponible. cert.ssi.gouv.fr/alerte/CERT…
1
5
6
1,173
An actor we're calling "ShroudedSnooper" is actively targeting telecommunications companies in the Middle East using a previously undiscovered #malware family. More details on this threat and how users can stay protected cs.co/6015PCxv1
14
2
16
4,790
Arnaud Zobec retweeted
The Brofessor@Glacius_15 Jun 2023
Hey :) We published an updated #Vidar's infrastructure analysis, providing more insights about infrastructure rotation over Russia and Moldova, traffic anonymization, new management keys, etc: team-cymru.com/post/darth-vi… Feedback welcome, and happy hunting 🍷 @teamcymru_S2
22
51
9,149
Whether your business is just getting off the ground, or looking to expand its cybersecurity program, our latest paper from Talos Incident Response has advice for building the strongest security plan, no matter your budget or team size. cs.co/6013OQVJd

Cybersecurity for businesses of all sizes: A blueprint for protection

Developing a robust cybersecurity practice involves implementing multiple layers of security measures that are interconnected and continually monitored, including training and awareness programs to...

blog.talosintelligence.com
7
10
2,458
We have new details on a #spyware tool called #Predator that's actively being sold and used to unknowingly track targeted users. Here's the full technical breakdown of how this tool works and why the use of "mercenary" spyware is on the rise cs.co/6016OWk3A

Mercenary mayhem: A technical analysis of Intellexa's PREDATOR spyware

Commercial spyware use is on the rise, with actors leveraging these sophisticated tools to conduct surveillance operations against a growing number of targets. Cisco Talos has new details of a...

blog.talosintelligence.com
49
8
62
30,961
🤓Excited to announce that Visual Threat Intelligence is now available as an ebook! Paperback will follow in a few weeks. There is a 15% launch discount on the eBook with code INTELLALLTHETHINGS. Valid for one week! #infosec #threatintel #cybersecurity 👇 store.securitybreak.io/threa…
46
133
22
384
93,016
Load more