Threat Researcher @Trellix - My tweets are my own
Dallas, TX
Joined November 2008
- Tweets89
- Following384
- Followers93
- Likes70
Alfred Alvarado retweeted
ICYMI: On August 29, 2023, an FBI-led effort dismantled the Qakbot malware and botnet. Learn about the upward attack trend preceding the takedown from Daksh Kapur, @_Fritto_, and Nico Yturriaga. bit.ly/3R8uZeo
Alfred Alvarado retweeted
Law enforcement led a successful campaign to disrupt and dismantle Qakbot on August 29, 2023. @TrellixARC’s Daksh Kapur, @_Fritto_, and Nico Yturriaga share everything you need to know to understand the malware and botnet. Qakbot:
bit.ly/3R8uZeo
Alfred Alvarado retweeted
🚨 Giveaway 🚨
Do we need a reason to hold a giveaway?
We want to give away two @TCMSecurity vouchers!
(1) Practical Web Application Penetration Testing
AND
(1) Practical Ethical Hacking
All you have to do to enter is:
1️⃣ Retweet this Tweet
2️⃣ Make sure you’re following us
Winner announced tomorrow at 5:00 PM
Alfred Alvarado retweeted
Explore securing the software supply chain with VP Customer Advocacy, @TrellixARC Karine Ben-Simhon at the Moscone South 207 #RSAC Sandbox Stage. The panel will cover:
🛡️ Threat intelligence
📈 Recent trends
🧰 Mitigation strategies
Join her: bit.ly/3KjUlRA
Alfred Alvarado retweeted
Want to mitigate the risk of being targeted w/ LOLBins? During their #RSAC session (located in Moscone South - 153), @TrellixARC researchers @tim_hux & @_Fritto_ discuss applicable threat hunting strategies & map MITRE techniques to real world examples. bit.ly/3KjUlRA
Alfred Alvarado retweeted
Avoid being a future victim of weaponized LOLBins — join @TrellixARC security researchers @tim_hux and @_Fritto_ at #RSAC to equip yourself with relevant threat hunting tools & techniques. bit.ly/3nEd02F
Alfred Alvarado retweeted
Lockbit ransomware group has informed us they have acquired a 3rd ransomware variant.
- Lockbit Red
- Lockbit Black
- Lockbit Green
They also have modified their ESXI ransomware variant.
Yes, they actually wrote "TLP:RED" in the image.
Alfred Alvarado retweeted
HIVE ransomware group's Tor domain has been seized by EUROPOL
*No official announcement yet from United States Department of Justice or EUROPOL
Alfred Alvarado retweeted
1/ DEV-0569, current distribution via #GoogleAds.
1.- #Gozi aka #Ursnif (bot) ↓
2.- #RedLine (stealer) ↓
And if the conditions are right, possibly:
3.- #CobaltStrike (C2) ↓
4.- #Royal Ransomware 💥
(No more BatLoader in the infection chain)
Alfred Alvarado retweeted
🚨 Ongoing mass exploitation of CVE-2022-44877 (Centos Web Panel 7 Unauthenticated Remote Code Execution).
Source: 206.189.170.136 🇺🇸
Malicious Base64 payload is a reverse shell that connects to 206.189.170.136:9181
The scanning of CWP instances started around January 06th.
Alfred Alvarado retweeted
Learn how to detect and address a threat hiding in a non-malicious source by diving into Living off the Land (LotL) attacks and exploring how to defend against them at Xpand Live. Register today: trellix.com/xpand
Alfred Alvarado retweeted
"The attack can be performed without user interaction if the management interface of the device has been configured to be internet facing."
@phLaul explains a new critical remote code execution vulnerability impacting DrayTek routers.
Read here: go.trellix.com/3dEf0D6
Alfred Alvarado retweeted
Join us from September 27-29 at Xpand Live for a deep dive into five relevant areas of modern security, covering everything from SecOps to #SoulfulWork and more!
▶️ ▶️ Register now: go.trellix.com/3vWBS7p
Alfred Alvarado retweeted
Join @spovolny in New Orleans on April 7th and listen to a great session titled A Case Study in Hacking Critical Infrastructure. go.trellix.com/3tqxPxR
Alfred Alvarado retweeted
REMINDER ➡️ Join us today @ 2pm ET for our panel discussion “Espresso Cyberbytes: A fresh new approach to security.”
Our panelists will discuss the current challenges in the #cybersecurity landscape, XDR, and more. Register: trellix.zoom.us/webinar/regi…
Alfred Alvarado retweeted
In addition to our Threat Center we have also created a RU cyber threat focused repository with our public Yara-rules and community shared Yara-Rules. 🙏 info-sec community #shieldsup github.com/advanced-threat-r… @TrellixLabs @Trellix
Alfred Alvarado retweeted
Our passion project lives on with Trellix, as we introduce ATR's second annual capture the flag! Upgraded with a theme, discord and all new challenges for all skill levels and interests! Register now- the CTF starts at 11:59pm Friday, Feb 11!
trellix.com/en-us/about/news…
#trellix #atr
Alfred Alvarado retweeted
We’re taking ‘New Year, New Me’ to the next level. 😉
Check out our new and exciting @TrellixLabs quarterly threat report detailing the biggest threats from last quarter and more: trellix.com/en-us/about/news…
Alfred Alvarado retweeted
My latest blog for @Trellix regarding WhisperGate is live! It contains an analysis of the four stages, in a collaboration with @ChristiaanBeek, @Raj_Samani, and others! Link: trellix.com/en-us/about/news…
🧵1/2
Alfred Alvarado retweeted
Iv'e created Gist with exploitation detection ideas and rules
I'll update this gist frequently
#log4j #log4jrce CVE-2021-44228
gist.github.com/Neo23x0/e4c8…
