#mstic — Public Fediverse posts

The Elite Microsoft Unit Constantly Working to Thwart Hackers

https://www.bloomberg.com/news/features/2025-05-09/microsoft-s-hacker-hunters-inside-the-secretive-mstic-unit

#HackerNews #Microsoft #Elite #Unit #Thwarting #Hackers #Cybersecurity #MSTIC #HackerHunters #TechNews

Hey #Microsoft, this is your friendly reminder that Bloomberg and the WSJ aren't threat intel publication!

Talking about large scale intrusions without sharing any actionable data for defenders is... well... very microsofty of y'all 🕵️
(to be clear, I don't blame the people at #MSTIC, I'm pretty sure this is down to company policies and orientations)

If y'all have not had a chance to play around with Microsoft Sentinel, I am super impressed! There are so many useful features with this tool. I'm still very early in the learning process and I've already found tons of useful data.

Anyone have Sentinel tips for blue teamers?

#infosec #sentinel #blueteam #mstic #security

What an awesome opportunity to hear from @Cyb3rWard0g of #MSTIC on today's #ThursdayDefensive on some of the ways Microsoft approaches adversary behavior classification and the supporting data sources.

Join us next week! https://www.reconinfosec.com/thursday-defensive/

Zerobot is a Go-based botnet that spreads primarily through IoT and web application vulnerabilities.

Learn how Zerobot works and how to defend devices and networks against it:

- Use Microsoft 365 Defender as security solutions with cross-domain visibility and detection capabilities

- Adopt a comprehensive IoT security solution such as Microsoft Defender for IoT, integrate it with XDR platform such as Microsoft Sentinel and Microsoft 365 Defender

- Harden endpoints with a comprehensive Windows security solution

- Ensure secure configurations for devices

- Use least privileges access

https://www.microsoft.com/en-us/security/blog/2022/12/21/microsoft-research-uncovers-new-zerobot-capabilities/

#microsoft #windows #security #iot #MSTIC #azure #xdr #microsoft365defender #defenderforIoT #iot #sentinel #microsoftsentinel #siem #soar #cloud #cloudsecurity #Zerobot #ssh #leastprivilege #rat #ioc #threatintelligence #ti #tip #ddos #ZeroStresser #webapp #vulnerabilities #cve

#MSTIC updates out today regarding DEV-0569 / Royal #ransomware
+ DEV-0569 likely to continue malvertising and phishing for Initial Access
+ #Batloader posed as installers for TeamViewer, Zoom, and AnyDesk
+ Malvertising campaign observed leveraging Google Ads to deliver Batloader selectively
#threatintel #infosec

https://www.microsoft.com/en-us/security/blog/2022/11/17/dev-0569-finds-new-ways-to-deliver-royal-ransomware-various-payloads/

#MSTIC updated out today regarding DEV-0569 / Royal #ransomware
+ DEV-0569 likely to continue malvertising and phishing for Initial Access
+ #Batloader posed as installers for TeamViewer, Zoom, and AnyDesk
+ Malvertising campaign observed leveraging Google Ads to deliver Batloader selectively
#threatintel #infosec

https://www.microsoft.com/en-us/security/blog/2022/11/17/dev-0569-finds-new-ways-to-deliver-royal-ransomware-various-payloads/

#MSTIC updated out today regarding DEV-0569 / Royal #ransomware
+ DEV-0569 likely to continue malvertising and phishing for Initial Access
+ #Batloader posed as installers for TeamViewer, Zoom, and AnyDesk
+ Malvertising campaign observed leveraging Google Ads to deliver Batloader selectively
#threatintel #infosec

https://www.microsoft.com/en-us/security/blog/2022/11/17/dev-0569-finds-new-ways-to-deliver-royal-ransomware-various-payloads/

Social Engineering: Liam Tung reports hackers are using fake job offers and #OpenSource software to target IT staff https://www.fosslife.org/hackers-use-fake-job-offers-and-open-source-software-target-it-staff #ZINC #hacker #FOSS #MSTIC #PuTTY #KiTTY #TightVNC #phishing #WhatsApp

📬 DEV-0270: BitLocker als Werkzeug einer Ransomwaregruppe
#Hacking #Malware #Bitlocker #DiskCryptor #LOLBIN #MSTIC #NemesisKitten #Phosphorus #Ransomwaregruppe https://tarnkappe.info/artikel/malware/dev-0270-bitlocker-als-werkzeug-einer-ransomwaregruppe-255437.html

📬 DSIRF: Microsoft warnt vor Softwarefirma – Staatsschutz ermittelt
#Hacking #DSIRF #Malware #Microsoft #MSTIC #Staatsschutz #Subzero #ZeroDaySchwachstellen https://tarnkappe.info/artikel/hacking/dsirf-microsoft-warnt-vor-softwarefirma-staatsschutz-ermittelt-253275.html

📬 DSIRF: Microsoft warnt vor Softwarefirma – Staatsschutz ermittelt
#Hacking #DSIRF #Malware #Microsoft #MSTIC #Staatsschutz #Subzero #ZeroDaySchwachstellen https://tarnkappe.info/artikel/hacking/dsirf-microsoft-warnt-vor-softwarefirma-staatsschutz-ermittelt-253275.html

📬 DSIRF: Microsoft warnt vor Softwarefirma – Staatsschutz ermittelt
#Hacking #DSIRF #Malware #Microsoft #MSTIC #Staatsschutz #Subzero #ZeroDaySchwachstellen https://tarnkappe.info/artikel/hacking/dsirf-microsoft-warnt-vor-softwarefirma-staatsschutz-ermittelt-253275.html