July 5, 2022

Lets start with a lol

The message below was meant to start an embargo for the issue, but it was CC'ed to netfilter-devel, which is a public mailing list, so it also appears here:

https://seclists.org/oss-sec/2022/q3/17

-

Lawrence Abrams @LawrenceAbrams

AstraLocker ransomware shut down and sent us their decryptors.

bleepingcomputer.comAstraLocker ransomware shuts down and releases decryptorsThe threat actor behind the lesser-known AstraLocker ransomware told BleepingComputer they’re shutting down the operation and plan to switch to cryptojacking.

-

SUEDE @SuedeBlade

Still blows my mind that Elmo, Grover and Kermit were all legitimate, relatively common names before the muppets made it impossible to name your child that. There was a president named Grover! Theodore Roosevelt's son was named Kermit! Now that's truly leaving a mark on culture

-

-

Michael Bazzell @IntelTechniques

Three years ago, we were bullied into taking our search tools offline, threatened with lawsuits, and suspended by our web host. Today, the tools return with updates, free for everyone. New features soon. Details on Friday's show. Please be responsible: inteltechniques.com/tools/

-

Bad crypto.

https://scottarc.blog/2022/07/04/police-cyberalarm-uses-alarming-cryptography/

-

This is a great interview with Stanimir Dobrev Twitter.com/delfoo on the state of the Russian military and Russian policymakers thinking. This guy was very very good on pre invasion assessments of Russian military capability. Now he disagrees with the German assessment.

To put that in context, the head of the German foreign intelligence service had to be rescued from Kyiv when he was surprised by the invasion. Germany is not exactly covering itself with glory on the intelligence front.

-

https://warontherocks.com/2022/06/strange-debacle-misadventures-in-assessing-russian-military-power/

-

samczsun @samczsun

1/ Today, someone tried to hack me with a crypto stealer, so I guess I've finally made it Fortunately, they weren't successful, but all it would've taken was three clicks. Read on to learn about how the attack works, how to protect yourself, and some basic malware analysis🕵️

-

エル🖕ケンタロウ @elkentaro

Local gang AirTagging undercover police vehicles to track them…

news.yahoo.co.jp捜査車両に「エアタグ」、犯罪組織が取り付けか 愛知県警が警戒強化（朝日新聞デジタル） - Yahoo!ニュース米アップルの「AirTag（エアタグ）」が愛知県警の捜査車両に取り付けられていたことが捜査関係者への取材でわかった。県警は暴力団を始めとする犯罪組織が警察の動向を把握するために取り付けたとみて捜査

-

Mythic 🔜 CanFURence 🇨🇦🍁 @MythicalRedFox

"Look at me, I'm a human! I pay taxes, I have depression, I'm behind on chores!"

-

Cyber, etc... @cyber_etc

🌐 The #LulzArmy / #DarkLulz hacking team rebranded in "Your Data Is Ours" (#YDIO) on July 1st. They launched #OpBRICS against the 5 major emerging economies : Brazil, Russia, India, China and South Africa. So far, they don't refer to the Anonymous collective. Via @OurDatas

YDIO @OurDatas

YDIO & Operation BRICS. - Official announcement: https://t.co/P3NwtNzS1U #YDIO.

-

♛ Maria R. Neykova @MariaRusanova88

-

2/22/22BuddyEsco @buddyescobar

Dog tried to air us out

-

hyper @hyprdude

here's a script i wrote that wraps around one of @0xdea's ghidra scripts to search for other instances of this vuln. its just grepping the decompiler output, so it can be used to search for anything really.

gist.github.comgrep for specific strings in ghidra decompiler from the commandlinegrep for specific strings in ghidra decompiler from the commandline - symgrep.sh

-

Josh Corman ♘ @joshcorman

It has begun… the story STARTS with an actual victim… proof of harm…

Josh Corman ♘ @joshcorman

Who has watched it yet? See what I mean? I think Quint’s telling of the USS Indianapolis will hit different this year https://t.co/ADm7YAT3mJ