$V @SteveVanasche77 Twitter Profile

$V

@SteveVanasche77

💾 CyberSecurity Analyst | 👨‍💻CEH - SIR

934Posts 135Followers 1KFollowing

Similar User

@Silvia_Felici

@reecdeep

@TheAudioHead

@BModularis

@andreasurbone

@MagdyHenidak

@cinzia_ercolano

@sonobiondascusa

@JAMES10GG

@InfoSecLeader

@BenguettaiaRida

@pavel_cmp

@Netbanger4

@solclarin

@jacopomorelli1

$V Reposted

$V

@SteveVanasche77

12 Nov

Analyzed a phishing case in M365: attacker bypassed MFA using axios HTTP client, leaving a telltale "axios/1.7.7" in sign-in logs. Lesson: regularly check sign-in logs for unusual user-agents to spot suspicious activity.

$V Reposted

$V

@SteveVanasche77

11 Nov

what's else is missing?

$V Reposted

$V

@SteveVanasche77

8 Nov

I developed an SSH client rootkit to test EDR detection. When a user logs in, it captures the root password and sends it covertly via a DNS TKEY record. With high daily DNS traffic, EDR systems are unlikely to flag this, as analyzing every query would impact performance.

$V

@SteveVanasche77

7 Nov

NotLockBit Ransomware Can Target macOS Devices - securityweek.com/notlockbit-ran…

NotLockBit Ransomware Can Target macOS Devices

Source: https://t.co/zkV9TS10hy

$V Reposted

$V

@SteveVanasche77

7 Nov

In 1974, Steve Jobs came to India in search for enlightenment. 7 months later, he returned with a philosophy that would later build Apple into a $1 trillion empire. Here’s the philosophy: 🧵

$V Reposted

$V

@SteveVanasche77

4 Nov

1/X Here's some details on recent SOCGholish / FakeUpdates initial infections and the TDS (Keitaro?) that goes along with it. This loader uses compromised sites to display a fake "browser update" themed lure that, when clicked, downloads the malware.

$V Reposted

$V

@SteveVanasche77

5 Nov

This incident was identical to the behavior of a compromised account as described in this recent article microsoft.com/en-us/security… --- TimeLine (9 days session) --- [Day 1] Initial Compromise - The victim received a phishing email with a subject line similar to "… shared ……

mthcht

@mthcht

5 Nov

zoomed, same scale with different colors

$V

@SteveVanasche77

1 Nov

Cyberoo’s research on the illegal sale of a database with 60 million Italian records reveals a critical need for stronger data protection.

$V Reposted

$V

@SteveVanasche77

30 Oct

Had occassion to dig into ADCS and SCCM for the first time. Seriously impressive work from @tifkin_, @harmj0y, @subat0mik, @_Mayyhem and others over at @SpecterOps Super professional presentation of information which led to some high impact easy wins. github.com/subat0mik/Misc…

GitHub - subat0mik/Misconfiguration-Manager: Misconfiguration Manager is a central knowledge base...

Source: https://t.co/ydsxI2ca7A

$V Reposted

$V

@SteveVanasche77

30 Oct

🚨🕷️ Proud to share my latest research on the LUNAR SPIDER campaign. Our findings reveal how RaaS operators leveraged LUNAR SPIDER’s malware, including IcedID and the Latrodectus loader, along with Brute Ratel C4 infrastructure, to enable their attacks on the financial sector.…

$V Reposted

$V

@SteveVanasche77

30 Oct

Working on a script that, when run, automatically extracts all browser data on the system—including passwords, cookies, history, and bookmarks—and sends it to my server.

$V Reposted

$V

@SteveVanasche77

29 Oct

$V Reposted

$V

@SteveVanasche77

28 Oct

This book is one of the best that gets into memory forensics, exploring how to analyze memory dumps for security investigations. It beautifully covers the structure of memory, process address spaces, and techniques for uncovering evidence of malware or attacks.

$V Reposted

$V

@SteveVanasche77

13 Oct

Offensive Security Tool: TerminatorZ TerminatorZ is developed by Chris Abou-Chabké from Black Hat Ethical Hacking and is an efficient web security tool designed to scan for potential vulnerabilities in your web applications. It uses a combination of advanced techniques and…