BogeyBackdoor

‘The doomsday predictions of wipers against US infrastructure at scale, hack-and-leak operations against defence and political targets, and coordinated destructive campaigns of the sort deployed in Ukraine never materialised.’ Read more @saffronsec.bsky.social: bindinghook.com/what-does-th...

FWIW, I don't want an AI SOC. Investigating threats is the interesting part of the defensive job. I just want AI to do my compliance and governance responsibilities for me.

@threatinsight.proofpoint.com's TREE team continues to punch above their weight with some world class research.

🚨 New research: Proofpoint has identified a suspected China-aligned espionage cluster, UNK_MassTraction, exploiting multiple Roundcube n-day vulnerabilities to compromise mail servers at U.S. and Canadian universities. Analysis, infection chain & IOCs: www.proofpoint.com/us/blog/thre....

🤔

Anyone else not get their #sleuthcon swag as a virtual attendee? wondering if it got lost in the mail.

"humans are gloriously messy. agents are suspiciously efficient" #sleuthcon @sleuthcon.bsky.social

Oh no, someone gave me the Atlassian MCP

Mohammad wanted to get back at his enemies in the regime, by leaking their secrets to me. And he wanted to rekindle his relationship with the CIA, which had not ended on good terms. He was angry. He was determined. And he was desperate. www.theatlantic.com/magazine/202...

A study in the evolution of SVR cyberespionage tradecraft

#ChangeMyMind #ElfOnTheShelf is a capitalist ploy to normalize a surveillance state to children.

New Iran banger from @saffronsec.bsky.social / @threatinsight.proofpoint.com just dropped. Full of good analytic tradecraft, Indicators and interesting lures showing how self aware Iranian cyber actors are... www.proofpoint.com/us/blog/thre...

Ninja editing all references in $newjob's documentation from ProofPoint to Proofpoint.

Trying to decide if I should establish a threat actor naming schema based on flavors of Trader Joe's popcorn flavors

The tool has been released in the Proofpoint Emerging Threats public #GitHub for other defenders to leverage. Learn more about it here: brnw.ch/21wWSH0 #PDF #threatdetection #cyberthreat

If you consider yourself a "Threat Intelligence Platform", don't email a spreadsheet of malicious indicators daily. That helps no one.

In addition to being one of history's most successful musicians, Taylor Swift has also successfully used a fire extinguisher.

Here’s what the Taylor swift and Travis kelce engagement taught me about B2B sales:

Suspected attribution...

Phish & Chips.

New: A handful of Chinese-linked cyber espionage groups are stepping up targeting of Taiwanese semiconductor companies, per new analysis from @proofpoint.com. Campaigns include targeting of financial analysts focused on the sector as well: www.reuters.com/sustainabili...

#what_is_sos

RIP my thrunting notifications.

Thrunting for Thractors

Dropping some joint research today with Threatray on TA397/Bitter 🔍 We dive into the confluence of signals that led us to our attribution of the threat actor 🎯 Shoutout to @konstantinklinger.bsky.social and Threatray for collaborating on this research. www.proofpoint.com/us/blog/thre...

ELECTRONIC ESPIONAGE and ELECTRONIC CRIME ftw

Not ready for Andor to end tonight…

@greg-l.bsky.social drops knowledge on TA406 (Konni) as North Korea shows new interest in Ukraine, likely to keep tabs on the progress of the war and Russia's ability to keep pace on the battlefield www.proofpoint.com/us/blog/thre...

If you're looking at email headers and they're not pretty, you need to install @jacoblatonis.me's @vscode.dev extension marketplace.visualstudio.com/items?itemNa...

What working in Cyber looks like protecting the business

My first blog with Proofpoint is live! And we love a good crossover. State-sponsored actors try their hand at ClickFix - the hottest thing in cybercrime. Meet the North Koreans, Iranians, and Russians who are upping their social engineering game www.proofpoint.com/us/blog/thre...

visualizing filenames is the cheatcode to discovering targeted activity. this should jump out at you

Introducing #UNK_CraftyCamel! Leveraged Trusted Business Relationship? ✅ Low Volume, highly targeted? ✅ Interesting technique? ✅ Overlaps with other IRGC clusters? ✅ Bonus: Infrastructure still up to watch how they respond to the blog? ✅ www.proofpoint.com/us/blog/thre...

Authoring a 39 page report criticizing someone else's reporting says a lot more about you than it does about them...

My low probability, high impact Lorcana Prediction: "WELCOME TO THE STORY" from the FABLED set coming Q3 actually indicates the introduction of a digital version along with the physical cards.