Malware Hunter | Huntress SOC Principal Analyst | USAF Veteran
Joined June 2025
- Tweets23
- Following56
- Followers143
- Likes30
Jonathan Semon retweeted
New: Attackers are abusing ChatGPT's Custom GPT feature, luring victims in w/ the legit ChatGPT domain and then directing them to a ClickFix attack that:
→Installs a malicious MSI
→Uses DLL sideloading
→Drops a RAT
More from @JSemonSecurity @the_MarkOH: huntress.com/blog/chatgpt-cu…
Jonathan Semon retweeted
This was interesting. I hadn't seen Google Docs weaponized like that before.
@_rdowd @JSemonSecurity and @threatresearch spent some time hunting everything down and it turned out a little more interesting than I previously thought.
We never got that linux lure though 🤣
huntress.com/blog/defcon-phi…
Hey @2Kgames @GearboxOfficial Looks like your domain at gearboxsoftware.com/ was compromised via some Wordpress extension... Might wanna get that cleared up.
Jonathan Semon retweeted
Search: “clear disk space on macOS”
Click: legit ChatGPT convo
Paste: “safe” Terminal command
Boom: AMOS infostealer installed
@stuartjash & @JSemonSecurity break down how Attackers are hijacking ChatGPT + Grok to deliver malware. huntress.com/blog/amos-steal…
Jonathan Semon retweeted
As of Thurs Aug 14th we're seeing clear indications that a threat actor has now weaponised and is exploiting vulnerabilities in Axis camera software (CVE-2025-30023/4/5/6) which was presented at DEFCON. Props to @Cyber4a53 for find.
axis.com/dam/public/9b/a5/72…
CC: @HuntressLabs
👇
Jonathan Semon retweeted
👀 DPRK threat actors are now using deepfakes and fake Zoom links to socially engineer macOS users.
Starts with a Telegram message. Ends with AppleScript. Targets crypto wallets.
Macs don't get viruses?
📖 by @stuartjash & @birchb0y & Jonathan Semon huntress.com/blog/inside-blu…
