InfoSec and Kubernetes Security. Glorified janitor. You can find me at the social network that shall not be named 😜: @shellguardians@infosec.exchange
Somewhere in Germany (Neuland)
Joined June 2011
- Tweets10.2K
- Following618
- Followers256
- Likes193
Xavier Garcia retweeted
🎙️ The next episode of the #BehindTheBinary podcast is here! Victor Alvarez, the creator of #YARA, joins us to talk about his early career, what motivated him to create YARA, and the role the community has played in its development.
open.spotify.com/episode/6qQ…
Xavier Garcia retweeted
„installing Wazuh agents on victims‘ devices“ … I love it 🖤
because the question is:
why use a C2 and risk detection when legitimate tools offer 90% of the functionality and usually fly under the radar of AVs/EDRs?
New @kaspersky report: Cybercriminals are spreading #malware via fake websites with popular software like uTorrent, Microsoft Office, & Minecraft, and through #Telegram channels and #YouTube, installing Wazuh SIEM agents on victims’ devices.
Full report: kas.pr/9icb
Xavier Garcia retweeted
The technique in the blog is quite interesting. In order to complement your detection strategy regarding drivers. The MS block list doesn't even come close to the full list. Loldrivers loldrivers.io/ is the one and only place to go as far as byovd abuse goes. Looking for service creation, registry keys or files with sys extension isn't quite enough.
We're adding a bunch more drivers very soon. Follow @magicswordio for the drop 🔥
This Post is from an account that no longer exists. Learn more
Xavier Garcia retweeted
No cURL⁉️ No wget⁉️🙈🙉🙊 Use THC's OpenSSL, Perl, Python or BASH one-liners (surl, lurl, purl or burl) to download your warez. 🍴
👉More tips at thc.org/tips 🧠
Xavier Garcia retweeted
We're launching major upgrades to our scanning engine! 🌐 Live Browsing: Interact with websites in real-time, dismiss alerts, solve CAPTCHAs, and more. Real Device Scanning: High-fidelity scans with actual mobile devices. Blog: urlscan.io/blog/2024/07/08/l…
Xavier Garcia retweeted
Parents, now is the time to be on guard. We are once again reminding you to be diligent about checking your child's candy throughout the Halloween season. vx-underground recently discovered THREE ransomware affiliates from ALPHV ransomware group inside of a Snickers.
Xavier Garcia retweeted
Tip of the Day™: Tape a small mirror over your webcam. Then if you get hacked, the hacker will only see himself via the webcam.
Xavier Garcia retweeted
ShmooCon 2023 Conference Videos archive.org/details/shmoocon…
Xavier Garcia retweeted
Bloated malware tends to be 400 - 900 MB to prevent sandbox analysis. My tool doesn't care: it cuts out the bloat.
The tool is a GUI and does all the work for you.
I expect it to work in 5/6 cases; send me cases where it fails.
Debloat: github.com/Squiblydoo/debloa…
Xavier Garcia retweeted
Introduction to fileless ELF execution by @MagisterQuis using memfd_create()
magisterquis.github.io/2018/…
#Linux #malware #infosec #cybersecurity
Xavier Garcia retweeted
Just published our (7th) annual "The Mac Malware of <Year>" report for 2022 🥳
It's 70(!) pages of technical details covering each malware's:
🔎 IoCs
💉 Infection
💾 Persistence
📡 Capabilities
+ ☣️ Sample for download
Read: "The Mac Malware of 2022"
objective-see.org/blog/blog_…
