#cyber-forensics — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #cyber-forensics, aggregated by home.social.
-
A Nigerian national sentenced to 8 years for compromising CPA firms using Warzone RAT.
Attack methodology:
• Targeted spear-phishing (CEO impersonation)
• Domain/email spoofing
• Malicious executable disguised via crypter
• Dropbox-hosted payload delivery
• RAT deployment for lateral movement + data exfil
• Harvesting SSNs + historical tax data
• Filing 1,000+ fraudulent returns
The indictment describes AV evasion and silent RAT installation once the executable was triggered.Detection questions:
Would EDR behavioral analysis have flagged unusual outbound traffic?
Were macro restrictions or executable policies enforced?
Was there email authentication enforcement (DMARC, SPF, DKIM)?
Was MFA enforced across admin endpoints?Financial services remain high-value PII targets.
Drop your technical perspective below.Follow @technadu for advanced threat intelligence reporting.
#Infosec #ThreatModeling #RAT #EDR #BlueTeam #RedTeam #MalwareAnalysis #PhishingDefense #CyberForensics #DigitalEvidence #DataExfiltration #SOC
-
Cyberwarfare is evolving, and so are the tactics used by advanced threat actors. Governments worldwide are investing heavily in cyber arsenals that rival traditional military capabilities.
Read: https://intellitrongenesis.com/2025/11/13/cyberwarfare-nation-state-attacks-in-the-new-era/#CyberAttack #CyberOps #DigitalWarfare #NationalSecurity #CyberForensics #MicrosoftAzure #Intel #Dell #Tesla #ai #tech #technology #war #security #cybersecurity #intelligence #artificialIntelligence #linux #web #aws #google #europe #asia #america #usa #australia #India #japan
-
Yeti (Your Everyday Threat Intelligence) - A platform that manages forensics 🔍 intelligence and connects CTI with DFIR artifacts
Check it out 🔥🔥:
https://github.com/yeti-platform/yeti#threatintelligence #DFIR #CTI #cyberforensics #threatintel #threathunting #cybersecurity #infosec
-
Yeti (Your Everyday Threat Intelligence) - A platform that manages forensics 🔍 intelligence and connects CTI with DFIR artifacts
Check it out 🔥🔥:
https://github.com/yeti-platform/yeti#threatintelligence #DFIR #CTI #cyberforensics #threatintel #threathunting #cybersecurity #infosec
-
Digital forensics firm with iPhone cracking technology lists Enforcement Directorate as one of its clients
Nextechno Gen, a Delhi-based cyber forensics firm, has access to tech from Cellebrite, an Israeli firm boasting of iPhone-cracking capabilities.
#ED #cellebrite #israel #iPhoneCracking #iphone #security #cyberforensics #india
-
Digital forensics firm with iPhone cracking technology lists Enforcement Directorate as one of its clients
Nextechno Gen, a Delhi-based cyber forensics firm, has access to tech from Cellebrite, an Israeli firm boasting of iPhone-cracking capabilities.
#ED #cellebrite #israel #iPhoneCracking #iphone #security #cyberforensics #india
-
:hacker_z: :hacker_o: :hacker_d: :hacker_s: :hacker_e: :hacker_c: 0xD :verified: @[email protected] ·Finished day 19 yesterday but fell asleep before posting 🤣🤣. Memory forensics is definitely my. Love Volitility 2 and 3. #adventofcyber2023 #adventofcyber #z0ds3c #tryhackme #memoryforensics #cyberforensics #BlueTeam
-
:hacker_z: :hacker_o: :hacker_d: :hacker_s: :hacker_e: :hacker_c: 0xD :verified: @[email protected] ·Finished day 19 yesterday but fell asleep before posting 🤣🤣. Memory forensics is definitely my. Love Volitility 2 and 3. #adventofcyber2023 #adventofcyber #z0ds3c #tryhackme #memoryforensics #cyberforensics #BlueTeam
-
"⚰️ Mozi Botnet's Mysterious Demise: The Kill Switch Discovery 🕵️♂️"
Researchers at ESET have uncovered the kill switch that led to the abrupt downfall of the Mozi botnet, a notorious threat to IoT devices. The botnet's activity plummeted in August 2023, first in India and then in China, as a result of a control payload delivered via UDP, bypassing the BitTorrent DHT protocol. This strategic takedown raises questions about its orchestrators - the botnet creators themselves or Chinese law enforcement. 🤔💡
Tags: #MoziBotnet #KillSwitch #CyberForensics #IoTSecurity #BotnetTakedown #ESETResearch #CyberSecurity #ThreatIntelligence
Credit: Ivan Bešina, Michal Škuta, Miloš Čermák via WeLiveSecurity
For a detailed analysis of the Mozi botnet's kill switch and its implications, stay tuned to ESET's upcoming publications. Meanwhile, explore the MITRE ATT&CK techniques used:
- Resource Development: Acquiring infrastructure like virtual private servers.
- Initial Access: Exploiting public-facing applications.
- Persistence: Using boot or logon initialization scripts.
- Exfiltration: Sending data over unencrypted protocols.
- Impact: Stopping services and blocking access with iptables.
-
"⚰️ Mozi Botnet's Mysterious Demise: The Kill Switch Discovery 🕵️♂️"
Researchers at ESET have uncovered the kill switch that led to the abrupt downfall of the Mozi botnet, a notorious threat to IoT devices. The botnet's activity plummeted in August 2023, first in India and then in China, as a result of a control payload delivered via UDP, bypassing the BitTorrent DHT protocol. This strategic takedown raises questions about its orchestrators - the botnet creators themselves or Chinese law enforcement. 🤔💡
Tags: #MoziBotnet #KillSwitch #CyberForensics #IoTSecurity #BotnetTakedown #ESETResearch #CyberSecurity #ThreatIntelligence
Credit: Ivan Bešina, Michal Škuta, Miloš Čermák via WeLiveSecurity
For a detailed analysis of the Mozi botnet's kill switch and its implications, stay tuned to ESET's upcoming publications. Meanwhile, explore the MITRE ATT&CK techniques used:
- Resource Development: Acquiring infrastructure like virtual private servers.
- Initial Access: Exploiting public-facing applications.
- Persistence: Using boot or logon initialization scripts.
- Exfiltration: Sending data over unencrypted protocols.
- Impact: Stopping services and blocking access with iptables.
