elceef (@elceef) / X

elceef
@elceef
Dec 22, 2024
Auto repair shop in Gdańsk, Poland uses a Commodore 64 running self-made program for balancing driveshafts. It's been working non-stop for over 25 years despite a flood, omnipresent dust and pigeons.
elceef
@elceef
Aug 24, 2023
This YARA rule might be helpful: github.com/elceef/yara-ru…
Group-IB Threat Intelligence
@GroupIB_TI
Aug 23, 2023
⚡️Group-IB Threat intelligence discovers a new 0-day in #WinRAR used to target traders #CVE-2023-38831 allows TAs to spoof file extensions and hide the launch of malicious script within a ZIP archive masquerading as a '.jpg', '.txt', and other formats ➡️bit.ly/45fFq44
elceef
@elceef
Jun 5, 2023
Heavily obfuscated batch scripts detected with #YARA rule BAT_Begin_Substring_Env: github.com/elceef/yara-ru…
LevelBlue
@LevelBlueCyber
May 31, 2023
Our latest threat analysis explores the rise of Remote Access Trojan (RAT) SeroXen to help teams identify and help protect against the pervasive threat. From execution analysis to detection methods, read our latest blog to learn more about the malware: cybersecurity.att.com/blogs/labs-res…
elceef
@elceef
May 11, 2023
Updated YARA rule Outlook_CVE_2023_23397_Exploit github.com/elceef/yara-ru…
Akamai Security Intelligence Group
@akamai_research
May 10, 2023
Remember that 0-click Outlook vulnerability with a custom sound leading to NTLM theft? Akamai researchers found a way to bypass the patch to it. In our write-up, see how adding a slash allowed for a bypass. akamai.com/blog/security-…
elceef
@elceef
May 9, 2023
dnstwist 20230509 is out! This update provides more precise homograph permutations for selected country-code TLDs. github.com/elceef/dnstwist