CIRCLE WITH A DOT

@krypt3ia is this a real person? Seems like AI to me

@jalefkowit it’s always been a meme stock. I’m surprised it’s still listed

@campuscodi Trump is disgusting

@wdormann ugh

@cR0w @reverseics I have no idea what you are taking about but I legit laughed out loud at your screenshot

Well-written article from Marlink on the Black Shrantac #ransomware group. I like that they have sections on “What defenders should watch for” and “How to reduce exposure” in addition to IOCs.

https://marlink.com/resources/knowledge-hub/black-shrantac-inside-the-ransomware-group-weaponising-legitimate-tools-against-global-organisations/

#cybersecurity

For those in the Microsoft Defender ecosystem

https://learn.microsoft.com/en-us/defender-xdr/whats-new

#cybersecurity

@mttaggart @ifin can you share the URLs that were involved?

@ifin one thing I’m interested in is the Ethereum API or RPC endpoint the malware is using for the Etherhiding. My theory is that these threat actors use the same handful of endpoints and I want to make their lives harder by blocking those endpoints cc: @mttaggart