Principal ICS Cyber sec person @ Kaspersky ICS CERT. Proud BEER-ISAC and RUSCADASEC member. Tweets are mine or written by Markov Chains
Joined May 2019
- Tweets318
- Following327
- Followers659
- Likes218
Terribly sad news. Sergey @Skvern0 left this world. He was one of the best APT hunters, absolutely passioned about fighting cybercrime. His YARA training was always sold out! And he was a GReAT person and friend
Goodnight, mr. Alice. You’ll be missed. Rest in peace my friend 💔
Happy to see Moscow Central Circle (МЦК), part of the Moscow Metro system, is on @CISAgov website!
cisa.gov/topics/critical-inf…
#iosTriangulation’s binary validator and @2igosha telling the most interesting details of investigation. Will we see those four 0days used? 🤔
#TheSAS2023
#IoSTriangulation latest report: securelist.com/triangulation…
However @2igosha will share additional details today at @TheSAScon #thesas2023
Vladimir Dashchenko retweeted
Our next blogpost on #iOSTriangulation (securelist.com/triangledb-tr…) is finally out. Today we are ready to share details about the final payload used in the attack, which is a #spyware implant that we dubbed #TriangleDB @bzvr_ @2igosha [1/3]
Vladimir Dashchenko retweeted
Hey everyone, this is my first tweet! We identified a backdoor we dubbed #Gopuram, the final payload in the #3CX attack. The threat actor (likely to be Lazarus) has deployed it to cryptocurrency companies. More details in this thread and on Securelist (securelist.com/gopuram-backd…)
We made a report "Threat landscape for industrial automation systems" in H2 2022.
We decided to show statistical changes in ICS threat landscape for Russia separately from the rest of the world - one of the most interesting data
Here's a full report ics-cert.kaspersky.com/publi…
Is there any chance to find alternatives for an expensive IDA Pro? There’s a cool post by @2igosha “How to train your Ghidra”.
securelist.com/how-to-train-…
Together with GReAT we've prepared an analysis of various activities that were observed in cyberspace in relation to the military conflict in Ukraine.
Did a cyberwar happen? This is a simple question with a very complicated answer
securelist.com/reassessing-c…
Here are some of the tricks and methods I have seen used to gain that all important initial access to remote systems. Specifically, the unexpected and unusual tricks!
ics-cert.kaspersky.com/publi…
We've prepared ICS Cybersecurity predictions for 2023+
Ideologically and politically motivated insiders, degrading communications between law enforcement, failing trust relationships in supply chains for both products and services(including OEM)
ics-cert.kaspersky.com/publi…
Really cool research! Kudos to @MsftSecIntel
Microsoft has discovered Raspberry Robin activity establishing its role in a complex, interconnected malware ecosystem that facilitates human-operated ransomware. Our latest blog details active operations and links to other malware and threat actors: msft.it/6011djXFR
The secrets of Schneider Electric’s UMAS protocol - our new publication about implementation of the Unified Messaging Application Services protocol. Details about implementation, connections between CVE-2020-28212 and CVE-2021-22779, bypassing auth
Enjoy!
ics-cert.kaspersky.com/publi…