blackorbird

Independent graphics card of the future

#Deepseek 's chat subdomain is under a UDP amplification-based DDoS attack.

😆

Why

Omg

Malicious actors exploit in virtual office services and hosting infrastructure, using jurisdictions with lax oversight to establish seemingly legitimate shell companies and hosting environments, thereby obscuring their identity and conducting illicit activities.
www.team-cymru.com/post/how-vir...

Lazarus group evolves its infection chain with old and new malware
securelist.com/lazarus-new-...

Link Trap: GenAI Prompt Injection Attack

www.trendmicro.com/en_us/resear...

blog.doyensec.com/2024/12/16/u...

The evolution of LATAM-based malware in 2024 highlights the adaptability and ingenuity of its developers, who continue to refine their tools to sustain successful eCrime campaigns.
www.crowdstrike.com/en-us/blog/l...

Censeye is designed to help researchers identify hosts with characteristics similar to a given target. #threathunting
github.com/Censys-Resea...

Kaspersky report on APT trends in Q3 2024 The report features the most significant developments relating to APT groups in Q3 2024, including hacktivist activity, new APT tools and campaigns.

APT trends report Q3 2024
securelist.com/apt-report-q...

A popular open-source game engine, to execute crafted GDScript, code which triggers malicious commands and delivers malware. The technique remains undetected by almost all antivirus engines in VirusTotal.
research.checkpoint.com/2024/gaming-...

I really like the freedom of BlueSky's API and hope it can be maintained. I will use the API to push more IOCs.

Ekoparty 2024: 20 años no es nada - YouTube

Ekoparty 2024: 20 años no es nada
www.youtube.com/playlist?lis...

Advanced threat predictions for 2025 Kaspersky's Global Research and Analysis Team monitors over 900 APT (Advanced Persistent Threat) groups and operations. In this piece of KSB series, we review the advanced threat trends from the past ...

Advanced threat predictions for 2025
securelist.com/ksb-apt-pred...

RomCom/Storm-0978 exploits Firefox and Windows zero days in the wild
Firefox 0day CVE-2024-9680 + Windows privilege escalation 0day CVE‑2024‑49039
welivesecurity.com/en/eset-rese...