Quantum Ransomware – The DFIR Report
https://thedfirreport.com/2022/04/25/quantum-ransomware/
VMWare Identity Manager Attack: New Backdoor Discovered
https://blog.morphisec.com/vmware-identity-manager-attack-backdoor
FBI Warns of BlackCat Ransomware That Breached Over 60 Organisations Worldwide
https://thehackernews.com/2022/04/fbi-warns-of-blackcat-ransomware-that.html
Tinker 🔆 on Twitter: "Physical Pentest Challenge: What is the pin code for this door? (I tried to take a good picture that minimized glare. Take a good close look first.) Note: I have validated it. So there is a correct answer. https://t.co/X4oqPtsNE3" / Twitter
https://twitter.com/TinkerSec/status/1518583239090319363
The Independent on Twitter: "🚨JUST IN 🚨 Twitter to accept Elon Musk’s $45 billion bid to buy company https://t.co/P9WUTGrPVk" / Twitter
https://twitter.com/Independent/status/1518561124232347649
Cryptolaemus on Twitter: "#Emotet Update - Ivan started up E4 spamming at approximately 14:15UTC. The current vector of the day is back to password protected ZIPs containing LNK files. The LNK files are actually working compared to Friday and are direct attached to the malspam in some cases." / Twitter
https://twitter.com/Cryptolaemus1/status/1518608288887287808
| Job Preference
http://www.jobpreference.com
Bored Ape Yacht Club Instagram Hacked, NFTs Worth Millions Stolen
https://www.vice.com/en/article/88gpxg/bored-ape-yacht-club-instagram-hacked-nfts-worth-millions-stolen
OffensiveCon22 - Samuel Gross and Amanda Burnett - Attacking JavaScript Engines in 2022 - YouTube
https://youtu.be/FK2-1FAbbXA
The DFIR Report on Twitter: "Quantum Ransomware ➡️TTR: 3h 48 minutes ➡️Initial Access: IcedID ISO ➡️Persistence: Scheduled Tasks ➡️Discovery: WMIC, net, nltest, AdFind, etc. ➡️C2: Cobalt Strike ➡️Lateral Movement: PsExec, WMI, RDP ➡️Impact: Domain wide ransomware https://t.co/Py3FqlElJx" / Twitter
https://twitter.com/TheDFIRReport/status/1518557060639735810
Updates - Updates - April 2022 | MITRE ATT&CK®
https://attack.mitre.org/resources/updates/updates-april-2022/
Elon Musk to Acquire Twitter
https://www.prnewswire.com/news-releases/elon-musk-to-acquire-twitter-301532245.html
Elon Musk on Twitter: "I hope that even my worst critics remain on Twitter, because that is what free speech means" / Twitter
https://twitter.com/elonmusk/status/1518623997054918657
ATT&CK Goes to v11: Structured Detections, Beta Sub-Techniques for Mobile, and ICS Joins the Band | by Adam Pennington | MITRE ATT&CK® | Medium
https://medium.com/mitre-attack/attack-goes-to-v11-599a9112a025
Elon Musk on Twitter: "🚀💫♥️ Yesss!!! ♥️💫🚀 https://t.co/0T9HzUHuh6" / Twitter
https://twitter.com/elonmusk/status/1518677066325053441
Critical Bug in Everscale Wallet Could've Let Attackers Steal Cryptocurrencies
https://thehackernews.com/2022/04/critical-bug-in-everscale-wallet.html
Industroyer2 IEC-104 Analysis
https://www.netresec.com/?page=Blog&month=2022-04&post=Industroyer2-IEC-104-Analysis
Old%20School,%20New%20Story--Escape%20from%20Hyper-V%20by%20Path%20Traversal.pdf
https://github.com/474172261/slides/blob/main/Old%20School%2C%20New%20Story--Escape%20from%20Hyper-V%20by%20Path%20Traversal.pdf
2022-04-22 Emotet Malspam Using Excel 4 Macro – Lost in Security (and mostly everything else)
https://www.herbiez.com/?p=1555
CySource virus total blog
https://www.cysrc.com/blog/virus-total-blog
Cryptolaemus on Twitter: "new Emotet E4 urls detected. [DLL] (1/2) hxxps://creemo[.]pl/wp-admin/ZKS1DcdquUT4Bb8Kb/ hxxp://filmmogzivota[.]rs/SpryAssets/gDR/ hxxp://demo34[.]ckg[.]hk/service/hhMZrfC7Mnm9JD/" / Twitter
https://twitter.com/Cryptolaemus1/status/1518594806917697536![Cryptolaemus on Twitter: "new Emotet E4 urls detected. [DLL] (1/2) hxxps://creemo[.]pl/wp-admin/ZKS1DcdquUT4Bb8Kb/ hxxp://filmmogzivota[.]rs/SpryAssets/gDR/ hxxp://demo34[.]ckg[.]hk/service/hhMZrfC7Mnm9JD/" / Twitter](/image/screenshot/73ecd0d79567b6902c8d0c68265538cc.webp)
Quantum ransomware seen deployed in rapid network attacks
https://www.bleepingcomputer.com/news/security/quantum-ransomware-seen-deployed-in-rapid-network-attacks/