Curated Intelligence @CuratedIntel
Bringing together intelligence researchers and incident responders. #TrackThePlanet curatedintel.org Joined September 2020-
Tweets400
-
Followers14K
-
Following104
-
Likes136
Reviving my blog with a complete analysis of the latest #LockBit #ransomware v4.0 Green! 🤠 chuongdong.com/reverse%20engi… h/t to @fwosar & @demonslay335 for all the crypto helps! Huge thanks to @BushidoToken & @CuratedIntel for the threat intelligence insight too! 🙏
⚠️PSA: VPN & RDWeb password guessing attacks have been observed originating from IP addresses consistently across the following subnets: 85.239.59.0/24 85.239.58.0/24 85.239.57.0/24 85.239.56.0/24 ➡️ Check for low & slow password guessing attempts and successful logins.
@jamieantisocial Thank you, Jamie
Related articles 1. arcticwolf.com/resources/blog… 2. horizon3.ai/attack-researc… 3. dashboard.shadowserver.org/statistics/com…
⚠️PSA: Curated Intel members in DFIR have noticed a trend in exploitation of CVE-2024-57727 in the SimpleHelp RMM tool to deploy Medusa ransomware. ➡️ This tool is often used by IT Managed Service Providers (MSPs) to remotely control customer endpoints and have been impacted.
Got a new project to share later this year which will be published via @CuratedIntel — a community of researchers that are awesome at providing great feedback and insights. Keep a look out for it in the next few months! 📝 Last time we did, we made this: curatedintel.org/2023/07/the-th…
⚠️PSA: Curated Intel DFIR has noticed a new trend among Akira Ransomware cases in Summer 2024. For a while, Akira has been exploiting Cisco ASA devices. ➡️ They are now targeting SonicWall SSL-VPNs for access with no MFA (!) and weak passwords (!). Other TTPs remain the same 🔍
PSA from the @CuratedIntel Community to the CTI industry — watch out for cybercrime groups seeking access to your vendor platforms ⚠️
@MHiemer22 Technical details available here: 1. blogs.cisco.com/security/akira… 2. truesec.com/hub/blog/akira…
⚠️PSA: Curated Intel DFIR teams noticed a severe uptick in Akira Ransomware cases in Jan 2024. Same repeated TTPs: - Dwell times of < 4 hours on average - Cisco ASA VPN for Access - WinSCP for exfil / WinRAR for compression - AnyDesk RMM for persistence - 'w.exe' Akira payload
Our friends at CSIRT-CTI have published their first new blog, stay tuned for more APT research from them! csirt-cti.net/2024/01/23/sta…
Come along to the first ever Curated Intel workshop. There will also be prizes for the best profile! #CTI
My upcoming CTI workshop: 'Keep Your Enemies Closer: How to Profile and Track Threat Actors' at #BSidesLondon2023 is live! pretalx.com/bsides-london-…
🌐 Curated Intel is tracking hacktivist, cybercriminal, and regional APT groups surrounding the war in Israel. We describe the types of campaigns and attacks we've observed so far and have also provided recommendations for CTI analysts monitoring the war. curatedintel.org/2023/10/tracki…
We had some good convos in the @CuratedIntel community today based on this @thecyberwire interview Really interesting that @C_C_Krebs says the *most important skill* he looks for in a CTI analyst is their “ability to communicate risk to businesses” 🗣️⚠️ thecyberwire.com/podcasts/speci…
A Day in the Life of a CISO
Pure facts #CTI
@BushidoToken @aejleslie @Gi7w0rm @AlvieriD @AJVicens @kevincollier @ddd1ms The thing that makes this profession hard sometimes is that victims lie about attacks, the criminals are lying pieces of shit, and randos on Twitter lie about what they know. Trying to get through the lies to the truth is a big challenge.
@phillmoore and I posted a blog on a TTP observed in an #Akira Ransomware case. ➡️ Actor gains access to Hyper-V server (with EDR) and creates a fresh VM ➡️ Turns off server VMs and mounts Hyper-V data disk on new VM ➡️Starts encrypting vhdx files! cybercx.com.au/blog/akira-ran…
TL;DR of ALPHV/BlackCat's essay on the MGM breach - The attack began ~8 Sept. - They stole data and gained admin on their Okta SSO & Azure cloud tenant - ~100 ESXi hypervisors were hit by ransomware on 11 September - No ransom was paid Read in full here: gist.githubusercontent.com/BushidoUK/20b8…
⚠️ Use Microsoft Teams? Watch out for TeamsPhisher! While it is not usually possible to send files to MS Teams users outside your org, by security researchers found a bypass by manipulating Teams web requests 🔥 github.com/Octoberfest7/T… Examples of MS Teams phish lures ⬇️ 1/3
vx-underground @vxunderground
455K Followers 386 Following The largest collection of malware source code, samples, and papers on the internet. Password: infected
Florian Roth ⚡️ @cyb3rops
225K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Will @BushidoToken
39K Followers 3K Following Senior Threat Intel Advisor @TeamCymru Co-founder @CuratedIntel Co-author @SANSForensics FOR589 Co-founder @BSidesBournemth #126: REvil @darknetdiaries
mRr3b00t @UK_Daniel_Card
126K Followers 8K Following Chief Artificial Intelligence Cyber Security Scientist Superintelligence-grade security former Helpdesk AI infection status: clean Task Force 29
Justin Elze @HackingLZ
74K Followers 5K Following CTO @TrustedSec | Former Optiv/SecureWorks/Accuvant Labs/Redspin | Race cars
Michael Koczwara @MichalKoczwara
25K Followers 2K Following Threat Researcher/Founder @Intel_Ops_io Threat Intelligence, Adversary Infrastructure Hunting, Curated TI Feed (Coming Soon) https://t.co/VQWaze6gaF
ςεяβεяμs - м�... @c3rb3ru5d3d53c
27K Followers 243 Following 💕 Malware Reverse Engineer & Malware Geneticist 💕 #Binlex Developer https://t.co/EKYUS9Itvd 👩💻 She/Her
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Germán Fernández @1ZRR4H
39K Followers 467 Following 🏴☠️ OFFENSIVE-INTEL 🏴☠️ Cyber Threat Intelligence by Hackers | Security Researcher at https://t.co/rDrSxZStZD | @CuratedIntel Member | 🥷🧠🇨🇱
Kostas @Kostastsale
21K Followers 516 Following I like building things that solve real problems, working across cybersecurity, product, and research | 🇬🇷🇨🇦
CyberKnow @Cyberknow20
37K Followers 3K Following Situational Awareness | Threat Intelligence | cybertracker | Hacktivism | Meme Farmer Digital Owl of the Cyber Realm Posts and Opinions are my own
Thomas Roccia 🤘 @fr0gger_
35K Followers 2K Following Founder @SecurityBreakAI AI Security x Threat Intel · Threat Researcher · Creator of #Unprotect & #NOVA · Python 🧡 · Prev @Microsoft @McAfee_Labs
💻 Sherrod @sherrod_im
39K Followers 7K Following Difficult mystery girl connected to the divine forces of the universe.
Soufiane @S0ufi4n3
14K Followers 241 Following A random infosec/science enthusiast guy... This account is personal and only reflects my opinions, not those of my employer...and if it hurts your feelings🖕
Gi7w0rm @Gi7w0rm
19K Followers 820 Following Threat Intelligence Analyst | Projects: https://t.co/azRpNg9NJQ & https://t.co/SyvUfXpbmI | If I post false intel, contact me! Support me: https://t.co/5WgDqr0K8p 🇪🇺🇩🇪🇺🇦🌈
Allan “Ransomware S... @uuallan
17K Followers 6K Following Back The Press Guardian & The Clock:1942 https://t.co/liXLX2DeQ8
Catalin Cimpanu @campuscodi
106K Followers 2K Following Cybersecurity reporter. I'm mostly active on BlueSky and Mastodon.
Clandestine @akaclandestine
65K Followers 5K Following | Security | Osint | Threat Research | Opsec | Threat Intelligence | Infosec | Threat Hunting | Humint |
SOS Intelligence @SOSIntel
20K Followers 2K Following Dark Web Intelligence. We find what's been stolen before it's weaponised. https://t.co/aQgEdlJVPl
Cyber_OSINT @Cyber_O51NT
23K Followers 321 Following #OSINT treasure hunter, investigator, #CyberThreatIntel analyst. Opinions are my own. Follow me on Telegram https://t.co/i6VBbeUXgd for cyber news.
Mikhail Bulov @infosweep305
0 Followers 147 Following
Jerry @Jerry1334H4x0r
30 Followers 180 Following CyberSecurity researcher and L33tHax0r views are my own
Miho @r3s3arcm02
24 Followers 2K Following
nily @nilyb38bv
0 Followers 10 Following
ames123478 @Jame739145
42 Followers 52 Following
Accoya @Accoya59
0 Followers 68 Following
Vivek Verma @h_verma97
4 Followers 456 Following Cybersecurity Enthusiast | Security Researcher | Web Security
Me @sjfpkt
29 Followers 227 Following
dia @gofthvns
32 Followers 747 Following chronic daydreamer who sometimes writes bad code and even worse poetry || icon by @/burnfake on IG
Alexi Derkatsch @AlexiDerkatsch
195 Followers 642 Following Building and publishing @bigBespokeLLC for @officeroneapp, @copapp_ai, https://t.co/YvSx5EB0qB. Prev Aerospace Systems Engineer on SLS-1B+/Vulcan
anotherb0y @cgs121396
0 Followers 72 Following
DS @dschaudel
3 Followers 512 Following
Cristian Sindile @cristiansindile
6 Followers 54 Following Dark Web, OSINT, CTI, OPSEC. Founder of Covert Security (@covsecintel).
winda @windapmqx
55 Followers 1K Following
john smith @johnsmith593i
0 Followers 46 Following
Tranos @XanAoX_tr
17 Followers 281 Following
LogicSec @lazylnl
5 Followers 2K Following
Sangamesh 🇮🇳/ac... @SAMorSANGU
523 Followers 7K Following Workaholic, Curious, serial Eater, Cinephile, Lone wolf, ENGInerd, Day-dreamer, trader(nifty)
ahok @ZtlMatt
5 Followers 441 Following
Vincetius Vulpes @VinceVulpes
170 Followers 3K Following Cybersec Pro, Coder of Fortune, Knave of all Trades, Artist of Human Motion. Opinions expressed are my own and do not represent the views of my employer.
Tom @TaoGhost08
673 Followers 8K Following Founder/CEO/Chairman 🇺🇸 🇮🇱 🕍🧬 Ashkenazi; Cohen/Levy. Built 3 firms. Crypto, AI, robotics, space, Taoism. Maximizing wealth, freedom, health & connection.
Man In Dark Shades AK... @ManInDarkShade1
168 Followers 502 Following A Kali Linux, Trace Lab, and OSINT User. Trolls be warned. Always looking and helping others. I have desires so just ask. I like to write and blog. Just ask
Gh0stM3rc @Gh0stM3rc
23 Followers 816 Following
Hira Jha @MaiHoonHira
26 Followers 376 Following Built https://t.co/Ycu5NoL3Tl and https://t.co/RPf49gwIAr, a trust intelligence API. Algo & F&O trader, own AI trade systems. I write about tech, AI and what I break.
David Szili 🆗 @DavidSzili
916 Followers 380 Following @AlzetteInfoSec Managing Partner | @BSidesLux Organizer | SANS Principal Instructor | Tweets are mine, all mine!
Ronexlinks @Ronexlinks
55 Followers 46 Following 💡 Digital Creator & Tech Enthusiast. Helping Africans navigate global business, remote income, and cross-border financial freedom.
Adrian Niedzielski @AdrianNiednu
22 Followers 1K Following
Dominique Ingoglia @SignalPixie
6 Followers 50 Following
d__b @petterbjorkl
7 Followers 180 Following
crimealysis @crimealysis
6 Followers 52 Following Building and consulting companies and LEAs to solve cybercrime
razu @razumlwr
47 Followers 399 Following
Jhones @jhones_sec
194 Followers 2K Following
AllyPry @allypry
162 Followers 844 Following OSINT & Blockchain Intelligence Analyst @Certik @CertiKAlert l Steward & contributor @_SEAL_Org
alisson wegner @AlissonWegner
0 Followers 6 Following
ibra @ibrapre
4 Followers 1K Following
Ben Mixon-Baca @bmixonbaca
33 Followers 409 Following PGP: https://t.co/z7l5P2whYu github: bmixonba ben a t breakpointingbad d o t com
vx-underground @vxunderground
455K Followers 386 Following The largest collection of malware source code, samples, and papers on the internet. Password: infected
Florian Roth ⚡️ @cyb3rops
225K Followers 3K Following Head of Research @nextronsystems #DFIR #YARA #Sigma | detection engineer | creator of @thor_scanner, Aurora, Sigma, LOKI, YARA-Forge | always busy ⌚️🐇 | vi/vim
Will @BushidoToken
39K Followers 3K Following Senior Threat Intel Advisor @TeamCymru Co-founder @CuratedIntel Co-author @SANSForensics FOR589 Co-founder @BSidesBournemth #126: REvil @darknetdiaries
Michael Koczwara @MichalKoczwara
25K Followers 2K Following Threat Researcher/Founder @Intel_Ops_io Threat Intelligence, Adversary Infrastructure Hunting, Curated TI Feed (Coming Soon) https://t.co/VQWaze6gaF
Katie Nickels @likethecoins
55K Followers 3K Following Director of Intel at @redcanary. SANS Certified Instructor for FOR578: CTI. Senior Fellow at @CyberStatecraft. She/her. Mastodon: @[email protected]
Germán Fernández @1ZRR4H
39K Followers 467 Following 🏴☠️ OFFENSIVE-INTEL 🏴☠️ Cyber Threat Intelligence by Hackers | Security Researcher at https://t.co/rDrSxZStZD | @CuratedIntel Member | 🥷🧠🇨🇱
The DFIR Report @TheDFIRReport
70K Followers 0 Following Real Intrusions by Real Attackers, the Truth Behind the Intrusion
Kostas @Kostastsale
21K Followers 516 Following I like building things that solve real problems, working across cybersecurity, product, and research | 🇬🇷🇨🇦
Thomas Roccia 🤘 @fr0gger_
35K Followers 2K Following Founder @SecurityBreakAI AI Security x Threat Intel · Threat Researcher · Creator of #Unprotect & #NOVA · Python 🧡 · Prev @Microsoft @McAfee_Labs
Unit 42 @Unit42_Intel
72K Followers 81 Following The latest research and news from Unit 42, the Palo Alto Networks (@paloaltontwks) Threat Intelligence and Security Consulting Team covering incident response.
💻 Sherrod @sherrod_im
39K Followers 7K Following Difficult mystery girl connected to the divine forces of the universe.
Max_Malyutin @Max_Mal_
13K Followers 304 Following Threat Researcher, Blue Team, DFIR, Malware Analysis, and Reverse Engineering. “⚔️What do we say to God of malware, Not today⚔️”
Microsoft Threat Inte... @MsftSecIntel
198K Followers 994 Following We are Microsoft's global network of security experts. Follow for security research and threat intelligence.
Bmth2600🎡🏖️ @bournemouth2600
333 Followers 191 Following The 2600 Hackers of Bournemouth who meet on the First Friday of Every Month. Talks, Workshops, Panels, Drinks! All are welcome 💻 | Account run by a random guy
Joe Roosen @JRoosen
9K Followers 2K Following SpyCloud - Senior Director of Security Research, Cryptolaemus, Emotet(Ivan)/QBot(Boris) Destroyer, gold prospector & former sysadmin. retweet != endorsement.
Ollie Whitehouse @ollieatnowhere
6K Followers 1K Following CTO @NCSC Former: PortSwigger, Interrupt Labs, NCC Group, BlackBerry, Symantec and Atstake
Steve YARA Synapse Mi... @stvemillertime
18K Followers 1K Following @greynoiseio writing & sharing on adversary tradecraft, malware, threat detection, AI-nexus intel and all things #yara
The Vertex Project @vtxproject
3K Followers 4K Following On a mission to create an intelligence-driven future with Synapse.
Intel-Ops @Intel_Ops_io
2K Followers 4 Following Adversary Infrastructure Hunting & Training Curated Threat Intelligence Feed (Coming Soon) https://t.co/N9OKrTrvV0 https://t.co/3YFZfEbgpI
Mark Kelly @markkelly0x
770 Followers 432 Following Threat research @Proofpoint 🇨🇳 | Member @CuratedIntel | former @RecordedFuture
Pulsedive Threat Inte... @pulsedive
3K Followers 284 Following Frictionless threat intelligence solutions for growing teams. On-demand searching, scanning & enrichment for the security community.
1ce7ea @1ce7ea
1K Followers 159 Following
Lena Yu @LambdaMamba
5K Followers 566 Following Creator of https://t.co/kdXvRaV6OH | Author of @NoStarch “The (Un)Natural History of Malware” | Founder of @MalwareVillage | 🇬🇧 with wife ❤️
monty @_montysecurity
682 Followers 232 Following threat hunter | profile art credit @vxunderground @pancak3lullz
CYBERWARCON @CYBERWARCON
6K Followers 569 Following 🎟️ Get your tix for CYBERWARCON 2026! | ▶️ Watch past talks at https://t.co/QwunPg85m2
tas_kmanager@infosec.... @tas_kmanager
929 Followers 2K Following ☁️🛡️ opinions are mine. food, music and astrophotography when afk. @TheDFIRReport @CuratedIntel #ThreatHunting #DetectionEngineering #DFIR #CloudSecurity
Daniel López @0xDanielLopez
3K Followers 542 Following Cyber Threat Researcher | @CuratedIntel member | https://t.co/Qca1zowojF | https://t.co/RDJsBcoh0y
. @4n6Bexaminer
1K Followers 764 Following
Kevin Holvoet @digihash
2K Followers 850 Following Cyber Threat Research Lead @CCB_Belgium/@CCBalert | #FOR578: #CTI @SANSInstitute instructor | @CuratedIntel | loves to try new things: food, beer whisky, etc.
ۗۗۗۗۗۗۗۗۗۗ�... @joshhighet
1K Followers 817 Following
Sean O'Connor (He/Him... @vHUMINT
957 Followers 2K Following Head of @Equinix Threat Analysis Center (ETAC) | @SANSInstitute FOR589 Author | @curatedintel contributor | Husband, Father, Veteran | Thoughts are my own
InfoSecProf @_John_Doyle
2K Followers 970 Following Cyber threat intelligence | Palo Alto Unit 42 | SANS FOR578 instructor | Arcane Trickster | Ex-Mandiant | Ex-CIA | Posts represent my personal views
CD-R0M @CD_R0M_
1K Followers 1K Following IR @Mandiant | Interested in #DFIR and #ThreatIntel | Tweets attributable to me and not my employer
Aaron Roberts @AaronCTI
2K Followers 1K Following Co-Founder @webamon_search, Founder @PIntelligenceUK, Training @kasescenarios, #MontyTheCyberCorgi. Webinars/Exec @OSINT_Community, Creator of the OSINT Portal
(╯°□°)╯︵ S�... @cybersecstu
29K Followers 4K Following Enough internet for today, enough cyber security for a lifetime. Mostly not here.
Alexander Leslie @aejleslie
4K Followers 466 Following Cybercrime & Hacktivism @RecordedFuture | @Georgetown, @AmericanU Alum. | @CuratedIntel Member | #ChiefsKingdom | Same handle on the other sites.
Danny @B4nd1t0_
434 Followers 715 Following USAF Veteran | Threat Hunter (DFIR) | Membership: @DeadPixelSec, @BlueTeamVillage, @curatedintel | DnD Nerd | pfp by @cyangmou | banner by @soarerv1
A10 Networks @A10Networks
15K Followers 16K Following A10 Networks provides secure, scalable application services for on-premises, cloud and edge-cloud environments.
Ohad Zaidenberg @ohad_mz
2K Followers 924 Following Forbes 30 Under 30 @Forbes | Head of Intelligence @abinbev | Founder @ctileague | @SANSInstitute Difference Makers Award WIRED25 @wired | Opinions are mine
Zach @svch0st
4K Followers 1K Following Everything DFIR @TheDFIRReport | @CuratedIntel | @XintraOrg https://t.co/ggakuKBS0S
Colin Cowie👨🏼�... @th3_protoCOL
3K Followers 874 Following Threat Intelligence 🏹 Malware Research 🧬 Managed Detection and Response @Sophos
Chelsea @seadev@infos... @seadev3
383 Followers 463 Following Efficiency enthusiast. Here for the swag. Tweets != employers @CuratedIntel Member
Danus @danusminimus
2K Followers 525 Following Member of @CuratedIntel | Researcher at @Pillar_sec | AI Security | OSCP
Malwar3Ninja | Threat... @Malwar3Ninja
4K Followers 3K Following Malware Hunter | Threat Intelligence: @threatviewio | Cyber Defense | DFIR | Views are personal | Retweet≠endorsement | 🍺🥃
EXC3L @exc3_l
35 Followers 306 FollowingTrends for United States
You might like
