Curtis
LightNews LightNews
cybershtuff.bsky.social
Curtis
@cybershtuff.bsky.social
24 followers 74 following 13 posts
Cloud, Incident Response, Threat Intelligence | ثريت انتل | @Invictus-ir.com | Previously U42 and PwC GTI
Posts Replies Media Videos
cybershtuff.bsky.social
Related:

www.sentinelone.com/labs/meteore...
MeteorExpress | Mysterious Wiper Paralyzes Iranian Trains with Epic Troll - SentinelLabs
In the midst of an epic troll on a country-wide railway system, we discovered a new threat actor and their reusable wiper called Meteor.
www.sentinelone.com
June 18, 2025 at 4:47 PM
cybershtuff.bsky.social
Call-back Proxy Network: 103.131.213[.]89 | 182.185.156[.]45 – likely a mix of anonymous activity and normal activity.
Mass SMTP Tester: 134.199.148[.]132 – banner previously responded with Mass SMTP Tester header.
May 14, 2025 at 12:46 PM
cybershtuff.bsky.social
Link to the IOCs and TTPs: github.com/invictus-ir/...

#DFIR #CTI #ThreatIntel
GitHub - invictus-ir/IOCs: Invictus Threat Intelligence: IOCs and TTPs from blogs, research and more
Invictus Threat Intelligence: IOCs and TTPs from blogs, research and more - invictus-ir/IOCs
github.com
February 19, 2025 at 2:57 PM