Faraday @0xffaraday
Security Analyst @Huntresslabs | SGF2ZSBhIG5pY2UgZGF5IQ== | Personal opinions and research are my own and don’t represent my employer Joined May 2022-
Tweets13
-
Followers152
-
Following158
-
Likes690
@IzzyBoopFPV Just drop this on disk: github.com/ParrotSec/mimi… 🥰
That wraps up #MalwareVillage @defcon 33! 🥳 Special thanks to all the organizers, sponsors, volunteers, speakers, workshoppers, collaborators, attendees, and everyone involved, for making this event absolutely legendary! 🤩 Thank you all! 🙏
Got a new @HuntressLabs blog out today taking a look at some intrusion analysis methodology with practical examples - check it out! huntress.com/blog/intrusion…
ATT&CK v17 is out! It contains an update I have campaigned for since 2022: DLL Hijacking is now a single sub-technique, merging Search Order Hijacking & Sideloading, plus supporting related techniques. Huge thanks & congrats to the @MITREattack team on this release 🎉
IOCs: SC domain: virustotal.com/gui/domain/soc… Domain involved with scheduled task: http[:]//shopeasy.giize[.]com/dashboard/bor3y/update[.]php SC installer: Recently_S_S_A_Statement9030773.exe VBS file from SC: C:\Users\Public\Music\//n5R79uzirhL2.vbs
Screenconnect installer downloaded from a newly registered domain. After installation, SC is used to drop a malicious .VBS in the directory "C:\Users\Public\Music\" and creates a scheduled task named: "MicrosoftEdgeUpdateTaskMachineCore"
@HuntressLabs SOC is seeing a newly suspected KoiLoader/KoiStealer attack chain. Details below:
Windows audit policies, some common events they enable, and the volume of events they produce. #ThreatHunting #DFIR #Cybersecurity
Who says #Python Malware is out of style? In our new #blog,@GuhnooPlusLinux revisits an old technique he believes is a prime candidate to host #malware payloads—Python for Windows. Read it now! hubs.la/Q033Jvyq0
Happy Friday, everyone! With recent changes in #LummaStealer - using ChaCha20 for C2 encryption, here is the new config extractor in C/C++. We will try a different approach this time 🐦 Enjoy! github.com/RussianPanda95…
"svchost.exe should always have services.exe as a parent process and should never be launched without any arguments/parameters" Welcome to the real world.
Ensure the client config "c:\programdata\jwrapper-remote access\jwappssharedconfig\serviceconfig.xml" does not have malicious entries within the <ConnectTo> tag. This allows the agent to be used remotely from multiple domains/IPs. virustotal.com/gui/ip-address…
@HuntressLabs SOC is seeing further malicious activity from SimpleHelp RMM. Please update your SimpleHelp instance to its latest version! IOCs in replies:
kiwi @Kiwi_FruitBird
1K Followers 1K Following
Cybermanc3r @Cybermanc3r
2 Followers 24 Following Security Researcher - Malware Enjoyer - Retro Gaming Enthusiast
Akindji Beyi @akindjibeyi
2 Followers 87 Following Adversary Threat Intelligence • Cybercrime Disruptor • Silent in noise, lethal in shadow.
jafise @jafisex
2 Followers 249 Following
. @CriticalQA
1 Followers 367 Following
Ryan @Chick3nHawk01
844 Followers 3K Following Threat Intelligence @NCCGroupplc | Ex Org @bsidesncl | ThreatIntel | Views are my own
Hworad MR @hworad
0 Followers 120 Following
erinpearson81 @erinpearso65716
2 Followers 127 Following
Roll4Combat @BadAt_Computers
2K Followers 2K Following Penetration Tester / Speaker/ Bug Bounty Hunter /
Karan Tank @thekarantank
14 Followers 411 Following
Razwan Hossain @razwan_hos46862
13 Followers 786 Following
Johnny @Luckyrocky2028
249 Followers 7K Following Stay Hungry, Stay Foolish. Only those who are self-disciplined can attain true freedom.｜No Politics.
hi ho @pwnnnn234567nn
0 Followers 28 Following
mavis @mavis8350329991
2 Followers 179 Following
er wang @QiwuSec
6 Followers 412 Following
Jonathan Semon @JSemonSecurity
126 Followers 54 Following Malware Hunter | Huntress SOC Principal Analyst | USAF Veteran
John Brennan @JB_InfoSecurity
30 Followers 23 Following
Izzy @IzzyBoopFPV
163 Followers 232 Following Unhinged Transfemme who pretends to be good at stuff sometimes.
dougy @R3dHash
856 Followers 2K Following Cyber Threat Intelligence | OSINT | Misinformation | Threat Hunting
CraigDavid @CraigDavid81318
0 Followers 108 Following
[REDACTED] @BeardofCNorris
3 Followers 2K Following
Misa @Miisa_nYu
4 Followers 238 Following
Mark @sneakymonk3y
2K Followers 999 Following uber geek blue team cyber commando bad guy annihilator @CrowdStrike OSCP MCRTP GREM GC|FA/FE/IH
ikram_ulhaq @salluloveg
13 Followers 628 Following
Jamie Levy🦉 @gleeda
10K Followers 6K Following @Volatility Core Dev | Art of Memory Forensics co-author | Sr. Director of Adversary Tactics @HuntressLabs | #DFIR enthusiast/trainer | [email protected]
duskxy @duskxy
36 Followers 1K Following
TreyCraf7 @TCraf7
574 Followers 1K Following Adversary emulation @scythe_io. Public Speaker. USMC vet. Writing about threat intel, detection engineering, and what actually works. Thoughts are my own.
x-ray @xray72837341
1 Followers 569 Following
Tony Lambert @ForensicITGuy
6K Followers 1K Following Recovering sysadmin that now chases adversaries instead of uptime. Sr Malware Analyst @redcanary
June @JunealaskaJune
2 Followers 304 Following
James Northey @darkrym11
235 Followers 101 Following SOC Analyst @HuntressLabs | Malware junkie | AI Glazer - Always curious, always learning!
Raven Cloud @BlueteamSecops
988 Followers 3K Following #cibersecurity #DFIR #Blueteam #Threathunting #CTI
erwang @erwang32086445
5 Followers 323 Following
Nightmare Eclipse @ChaoticEclipse0
9K Followers 574 Following
kiwi @Kiwi_FruitBird
1K Followers 1K Following
ななん【memecult�... @nanan_memecult
150 Followers 41 Following @memecult_world ドーリィにゃんこ担当 ヴィーナスブルー🐬🫀 DMスタッフ管理♡꒷꒦ #せでゅななん
Mira @_miraarim_
121 Followers 96 Following mira mira on the wall Ex corpo girlie that now breaks your cyber-stuff | Ex child, pre adult.
Kostas @Kostastsale
20K Followers 383 Following I like building things that solve real problems, working across cybersecurity, product, and research | 🇬🇷🇨🇦
Locke @WendigoWear
314 Followers 761 Following Just chilling in the wild somewhere in the PNW. Cryptid, Cybersec, CISSP, CISM, DOMINUS, aka Locke aka Hegemon Ruler of earth, aka God Emperor
BSides Pyongyang @BSidesPyongyang
1K Followers 704 Following 🇰🇵 #BSidesPyongyang2026 : Nov 18 2026 (Missile Industry Day) @ Lazarus HQ Pyongyang & Live Stream | 31st anniversary 🎂 https://t.co/gb9sDPJC8X
Will Schroeder @harmj0y
49K Followers 972 Following Researcher @SpecterOps. Coding towards chaotic good while living on the decision boundary.
Greg @GregDavill
33K Followers 801 Following
Matt Anderson @nosecurething
2K Followers 1K Following Staff Detection Engineer @HuntressLabs Threat Research | Threat Hunting | Malware Analysis
Vulfpeck @vulfpeck
65K Followers 0 Following
Roll4Combat @BadAt_Computers
2K Followers 2K Following Penetration Tester / Speaker/ Bug Bounty Hunter /
Squiblydoo @SquiblydooBlog
5K Followers 98 Following Malware Analysis Creator of Debloat, certReport, and https://t.co/hEJGt0jzIq Want to chat? Join the Debloat discord: https://t.co/ZcWIqa6ZA9
そらちぃ @2315ciel
6K Followers 333 Following s15→s13silvia / drift / ☠️ORIGIN labo. support driver / ABARENBOU✌︎GAL
Grant Sanderson @3blue1brown
437K Followers 368 Following Pi creature caretaker. Contact/faq: https://t.co/brZwdQfdif
Hunt.io @Huntio
6K Followers 937 Following https://t.co/9I6nRUiFjm is a service that provides threat intelligence data about observed network scanning and cyber attacks.
Chetan Nayak (Brute R... @NinjaParanoid
32K Followers 0 Following Dark Vortex Founder/Brute Ratel Author
Michal Melewski @carste1n
4K Followers 346 Following Security Engineer @ Somewhere ex-Google, ex-Cloudflare I use bad software and bad machines for the wrong things. My writing: https://t.co/Z7uucr5BYW
UwU Underground @uwu_underground
16K Followers 285 Following 🐴Pwnie Award Winning & Nation State funded psyop featuring 6 AI Anime Waifus and a Pup™ singing about APTs, Grifters, & Snake Oil in InfoSec 🖤🩷💚💙💜🤍
voidsip @voidsip
421 Followers 854 Following
Jonathan Semon @JSemonSecurity
126 Followers 54 Following Malware Hunter | Huntress SOC Principal Analyst | USAF Veteran
Christopher Peacock @SecurePeacock
7K Followers 2K Following #PurpleTeam | Ex @RaytheonTech MSSP, @SCYTHE_IO, & @GD_OTS | Taught at BlackHat & DEFCON | #100DaysofSigma | Keep exploring, keep learning, and stay curious
John Brennan @JB_InfoSecurity
30 Followers 23 Following
Blaise @BlaiseBrignac
414 Followers 152 Following Left the USB, took the cannoli. Hacker shenanigans 8-11pm CST, Sat-Thurs @ https://t.co/vrcdljAdDj
Izzy @IzzyBoopFPV
163 Followers 232 Following Unhinged Transfemme who pretends to be good at stuff sometimes.
ali @endingwithali
30K Followers 444 Following software engineer - content creator @ https://t.co/4vI4dOxzmn - threatwire host @hak5 - nyc - MIT - jewish
Jamie Levy🦉 @gleeda
10K Followers 6K Following @Volatility Core Dev | Art of Memory Forensics co-author | Sr. Director of Adversary Tactics @HuntressLabs | #DFIR enthusiast/trainer | [email protected]
Greg Linares (Laughin... @Laughing_Mantis
37K Followers 2K Following 20+ yrs in Infosec. Malware Influencer. I turn Malware into Art and Music. Art @MalwareArt. 4x Pwnie Nominee. 𝕍𝕏. GameDev. Autistic.
TreyCraf7 @TCraf7
574 Followers 1K Following Adversary emulation @scythe_io. Public Speaker. USMC vet. Writing about threat intel, detection engineering, and what actually works. Thoughts are my own.
James Northey @darkrym11
235 Followers 101 Following SOC Analyst @HuntressLabs | Malware junkie | AI Glazer - Always curious, always learning!
Will @BushidoToken
38K Followers 3K Following Senior Threat Intel Advisor @TeamCymru | Co-founder @CuratedIntel | Co-author @SANSForensics FOR589 | Co-founder @BSidesBournemth | @darknetdiaries #126: REvil
Silas Cutler (p1nk) @silascutler
14K Followers 2K Following You may know me from your logs Principal Security Researcher @Censysio #Threats / #CTI / #Malware / #Hacking
LaurieWired @lauriewired
154K Followers 292 Following researcher @google; serial complexity unpacker; https://t.co/Vl1seeNgYK ex @ msft & aerospace
Kyle Cucci @d4rksystem
6K Followers 570 Following Threat Research @proofpoint | Author of "Evasive Malware" @nostarch | Talks about cybercrime, threat intel, and malware stuff.
Tony @TJ_Null
23K Followers 489 Following Blue Teamer in Disguise. Blog at https://t.co/spa33ybIVL. SANS Netwars Champion. Former community manager and founder of the Offsec community for @offsectraining
grey @greysploitstech
763 Followers 378 Following Penetration Tester | OSCP | OSWE | CRTO | CRTP | CTF w/ IrisSec
SquareZer0 @__squarezero__
159 Followers 2K Following Offensive security | AD, Azure, and wireless exploitation
Bryson 🦄 @brysonbort
20K Followers 499 Following 🦄 @scythe_io @grimmcyber, Sr Advisor @IST_Org & NatSec Sr Fellow, Co-Fdr @ICS_Village, @c2_matrix co-creator, USMA Science Board, Angel Investor, US Army OffcrTrends for United States
You might like
