Incident Response @Google (@Mandiant)

Joined November 2010
🚀 Mandiant Community Night is back 🚀 Join us on Thursday 13th Feb, 17:30 at Google London for exclusive insights on real-world attack trends, and connect with Cyber Security professionals! 🎟️ Limited spots—RSVP now: bit.ly/40ERjzq
3
16
2,410
The Mandiant Community Night 🇬🇧 is back for 2025! Join us on February 13 in our London @Google office. You can expect a night of technical talks and networking with drinks and pizza! Spots are limited so get your names in to not miss out. rsvp.withgoogle.com/events/m…
127
Mathias Frank retweeted
.@Volexity’s latest blog post describes in detail how a Russian APT used a new attack technique, the “Nearest Neighbor Attack”, to leverage Wi-Fi networks in close proximity to the intended target, while the attacker was halfway around the world. volexity.com/blog/2024/11/22… #dfir
6
170
34
380
95,898
You want to investigate challenging and impactful intrusions? Mandiant has an opening for an Incident Response Consultant in their UK&I team🔥 google.com/about/careers/app… #Mandiant #Google
1
2
148
We released our analysis of Pygmy Goat - a native x86-32 ELF shared object that was discovered on Sophos XG firewall devices, providing backdoor access to the device. ncsc.gov.uk/static-assets/do… Yara / STIX / Snort etc ncsc.gov.uk/section/keep-up-…
4
103
3
230
25,276
Mathias Frank retweeted
🧐 SSSCIP unveils new report: russian Cyber Operations (H2 2023)👇 cip.gov.ua/en/news/kiberoper… #cybercrime #cyberattack #hacker #cybersecurity #cyber #cyberwar #hybridwar #Espionage #spy
2
21
4
34
21,744
Mandiant reveals that a “hacktivist” persona created by APT44, has recently targeted & disrupted U.S. and Polish water utilities, as well as a French dam. Read more on our latest findings here: bit.ly/4aS7RYe #Mandiant #APT44
1
81
6
170
27,998
We have another opening in Mandiant's UK Incident Response team! #Mandiant #Google google.com/about/careers/app…
You want to investigate the most challenging and impactful intrusions? We are looking for an incident responder to join our UK team 🔥 #Mandiant #Google
2
3
563
APT29 (Midnight Blizzard/Cozy Bear) is targeting German political parties. The SVR has been on a tear lately and their mission of keeping Putin up to date on the West's thinking is especially important at this critical moment in the war. 1/2 mandiant.com/resources/blog/…
6
93
6
184
52,521
You want to investigate the most challenging and impactful intrusions? We are looking for an incident responder to join our UK team 🔥 #Mandiant #Google
At long last we're recruiting for an incident responder in our UK team! If you're looking to work on some of the most challenging and impactful breaches around, this role is for you! google.com/about/careers/app…
4
1
4
1,382
Mathias Frank retweeted
Really cool to see how the recent critical Citrix Netscaler exploit worked to gain access to appliances thanks to @googlecloud @Mandiant Matthias Frank at @SANSInstitute @NCSC #CyberThreat23
4
14
1,786
🔥
Replying to @Mandiant
@Mandiant has identified 0- and n-day exploitation of Citrix NetScaler #CVE-2023-4966, which was abused to hijack sessions and compromise multiple organisations going back to late August 2023. Here is a summary of what we found: mandiant.com/resources/blog/…
1
224
UNC3886 has been exploiting a 0-day vulnerability in VMware ESXi hypervisors. See our latest blog for more on this group, as well as steps organizations can take to detect and respond to a newly exploited 0-day vulnerability in VMware ESXi hypervisors. mandiant.com/resources/blog/…
63
4
148
43,712
On May 31, 2023, Progress Software Corporation announced a wide exploitation of zero-day vulnerability in the MOVEit Transfer secure managed file transfer software. Learn more here: mndt.info/3oGS8ZN
12
1
16
7,794
Mathias Frank retweeted
Currently working on my new open-source project "Artifact-Graph", a knowledge graph that let's you explore overlaps and pivot points of forensic artifacts. A very early Alpha version is online available at sebastiandemmer.github.io/ar… Let me know what you think!
1
12
1
39
5,055
M-Trends 2023 is live! Download the 14th edition of Mandiant’s unique analysis of today’s cyber threat landscape today. mandiant.com/m-trends #MTrends #Cybersecurity
2
33
7
53
19,394
Mathias Frank retweeted
"Mandiant responded to multiple UNC2970 intrusions targeting U.S. and European Media organizations through spear-phishing that used a job recruitment theme" mandiant.com/resources/blog/…
9
1
17
3,639
I have a spare ticket for @BSidesCymru 🔥 on Saturday 11/02 in Cardiff, UK. Please PM me if you are interested. #BSidesCymru
1
2
1
755