Louis Cremen π¨π»βπ» retweeted
Check out the latest trick North Korea is using to gain access to companies.
DPRK employment fraud has been a persistent issue for most tech companies for the last several years. They use decent fake IDs. They can pass basic background checks. They have different approaches for working off your company laptops without you seeing that they are overseas. But they are usually very uneasy about being on camera. So this was the obvious next step.
Anyone whoβs used TikTok knows the live filters they have are much better than whatβs on display here. And the βput your hand infront of your faceβ trick isnβt a problem.
This specific instance has not been proven to be DPRK yet. But, as someone who has delt with it a bunch, this has signs it probably is.
WTF, people are using real-time AI to alter their faces during interviews
this is a REAL recording from a meeting I had with the developer today!!
1. all of his answers were from ChatGPTβI could smell the GPT-4 bullet point-style responses
2. HE WAS USING SOFTWARE TO CHANGE HIS APPEARANCE
why? I do not know...
this is messed up.
i muted his audio for privacy reasons
Louis Cremen π¨π»βπ» retweeted

MrBeast@MrBeast22 Jan 2024
United States
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
Louis Cremen π¨π»βπ» retweeted
THIS is an APT. No "cmd /c net user", just technical capability that's almost indistinguishable from magic
Louis Cremen π¨π»βπ» retweeted
Iβve had people asking for a solid year about this but had to keep my mouth shut.
Here is your answer about OMG Cables and new π phone
Louis Cremen π¨π»βπ» retweeted
So I've been just been briefed on a very disturbing trend of events that I think everyone should know.
Ransomware attackers have been targeting legal firms quite heavily in the last 6 months or so.
I thought this was because pretty poor security, but there's much more.
A π§΅
Louis Cremen π¨π»βπ» retweeted
Two racks. My friends, it fits in *two racks*. I love the cloud as much as the next person, but $7m over five years to run a workload that will fit in *two racks* makes me want to sleep for a year. Fully automating two racks was not hard. world.hey.com/dhh/we-stand-tβ¦
Louis Cremen π¨π»βπ» retweeted
Don't like the views metric. It's distracting and serves no purpose other than to encourage people to tweet more. Serves Twitter but not users. Should give users ability to turn it off. Also, what is a view? Just that it showed up in someone's feed or was embedded in an article.
Louis Cremen π¨π»βπ» retweeted
After a few days of collection, I analyzed over a million lines of results and found an autorun entry using legitimate install of javaw.exe to launch a randomly named file in the user directory, which turned out to be a Java RAT missed by multiple engines. virustotal.com/#/file/08bd92β¦
Louis Cremen π¨π»βπ» retweeted
Emotet asks targets to copy the spreadsheet to these folders as they are 'trusted' by Microsoft Office.
When a file is launched from these folders it bypasses the Microsoft Office Protected View security feature, allowing macros to automatically execute without warning.
Louis Cremen π¨π»βπ» retweeted
My only cybersecurity career goal is to learn how to spell βreconnaissanceβ
Louis Cremen π¨π»βπ» retweeted
Hereβs my quick an dirty lab workout for Detection Engineers. I do this work out 2 to 3 times a week for about 2 hours. #CyberSecurity #infosec #BlackTechTwitter
Louis Cremen π¨π»βπ» retweeted
15 years ago my PhD advisor taught me One Weird Trick for editing your own writing. Edit **back to front**, paragraph by paragraph. I still use it and it still surprises me how well it works. When I get my students to do it, it often blows their minds. Try it!
Louis Cremen π¨π»βπ» retweeted
William Shatner on his Blue Origin flight to space: "It was among the strongest feelings of grief I have ever encountered." variety.com/2022/tv/news/wilβ¦
Louis Cremen π¨π»βπ» retweeted
ICYMI, threat actors on multiple underground forums are sharing around a copy of a cracked version of Brute Ratel (aka BRC4), brace for attacks
"bruteratel_1.2.2.Scandinavian_Defense.tar.gz"
virustotal.com/gui/file/591cβ¦
h/t @darkcoders_mrx for the pic
Louis Cremen π¨π»βπ» retweeted
lmao the official nintendo splatoon 3 port forwarding guide just says "open ports 1 - 65535"
thats all of them. that is all of the ports.
Louis Cremen π¨π»βπ» retweeted
Today at DDLS, π¨π»βπ» Louis Cremen has just started delivering the brand new @ECCOUNCIL #CEHv12 (certified #ethicalhacking) #training - the first delivery of this new version in #Australia and one of the first to be launched #globally. ow.ly/VclU50KGq4n #CEH #cybersecurity
Louis Cremen π¨π»βπ» retweeted
π¨ Attention Kerberos Researchers π¨
A thread on some new Kerberos correlations you can make for detections β¬οΈ
Louis Cremen π¨π»βπ» retweeted
Want to know about a vulnerability that very few people know about?
If you see an OAuth request (i.e: GET /authorize?) Look for the "code_challenge=SUPERSECRETCODE" in the GET request and just delete it. If "code challenge" not checked = vuln
Reference:
ietf.org/archive/id/draft-ieβ¦
Louis Cremen π¨π»βπ» retweeted
Data on more than 1 billion people were leaked from a Shanghai police database.
The most astounding aspect of this case may be the fact that it likely wasnβt a hack that caused it, but basic errors in digital hygiene trib.al/YF2cnmI
Louis Cremen π¨π»βπ» retweeted
Important: Apple unveils new security "Lockdown Mode" that lets high-value hacking targets give up functionality and cut off the attack surface used by NSO Group and top spyware makers. washingtonpost.com/technologβ¦


























