Cyber Threat Detection & Response
🇧🇷
Joined April 2009
- Tweets127
- Following679
- Followers166
- Likes741
Raphael Mendonça retweeted
🛑Ripple's recommend XRP JavaScript library, xrpl.js, was compromised on NPM in a supply chain attack to steal crypto wallets.
The index.js file and other functions were modified to include a function that sends private keys and seeds for XRP wallets to https://0x9c[.]xyz/xcm.
Raphael Mendonça retweeted
Our latest post detailing compromising the #PaloAlto #Expedition. While investigating CVE-2024-5910, we discovered and reported 3 additional vulnerabilities allowing an attacker to obtain RCE and leak integration credentials across the ecosystem.
horizon3.ai/attack-research/…
Raphael Mendonça retweeted
Microsoft identified a North Korean threat actor exploiting a zero-day vulnerability in Chromium (CVE-2024-7971) to gain remote code execution. Our assessment of ongoing analysis and observed infrastructure attributes this activity to Citrine Sleet. msft.it/6010l7S6w
Raphael Mendonça retweeted
📉Maior correção diária das criptomoedas a cada ano
2014: -17,3%
2015: -16,9%
2016: -14,2%
2017: -22,3%
2018: -19,0%
2019: -12,5%
2020: -39,6%
2021: -22,2%
2022: -13,5%
2023: -6,3%
2024: -8,4%
True
Unpopular opinion: we need to stop the cartoon illustrations depicting threat actors as pandas, cute robots or bears in CTI reporting. These are f*cking intelligence agencies or military units we're talking about. Let's get serious about this stuff, because it matters. We shouldn't desensitize all of this.
1
248
Raphael Mendonça retweeted
Manipulated Caiman: The Sophisticated Snare of Mexico's Banking Predators perception-point.io/blog/man…
Raphael Mendonça retweeted
Microsoft Incident Response's investigation of a BlackByte 2.0 ransomware attack that progressed in less than five days highlights the importance of disrupting common attack patterns, stopping attacker activities that precede ransomware deployment: msft.it/6010gxvlQ
Recently, we identified a group known as the #Snatch #ransomware executing a series of instructions with the intention of disabling priority services, deleting security and system audit logs, among others.
pastebin.com/jbMdXz7m
4
229
Raphael Mendonça retweeted
O setor farmacêutico é alvo frequente de cibercriminosos, que visam informações e vantagens econômicas que vacinas e medicamentos podem oferecer.
Descubra mais sobre as Ameaças cibernéticas no setor farmacêutico e se prepare para o futuro: pwc.to/3Bs6obv.
Raphael Mendonça retweeted
[Q1 2023 Stealer Malware Intelligence Report - Global]
During the first quarter of 2023, 1,009,519 users were infected with the Stealer malware, which led to the leakage of about 118,665,570 credentials stored in their web browsers onto the dark web.
The accompanying map illustrates the geographic distribution of infected users during the first quarter of 2023.
