@matt-muir.bsky.social
Security Researcher @ Datadog
Mainly malware analysis and cloud security
Mainly malware analysis and cloud security
Our quarterly roundup is here. Lots of interesting findings to dig into from Q4 2024!
securitylabs.datadoghq.com/articles/202...
securitylabs.datadoghq.com/articles/202...
Datadog threat roundup: top insights for Q4 2024 | Datadog Security Labs
Threat insights from Datadog Security Labs for Q4 2024.
securitylabs.datadoghq.com
January 24, 2025 at 5:25 PM
Our quarterly roundup is here. Lots of interesting findings to dig into from Q4 2024!
securitylabs.datadoghq.com/articles/202...
securitylabs.datadoghq.com/articles/202...
Good collab with @christophetd.fr last week!
In-depth investigation by Datadog security researchers into a threat actor dubbed MUT-1244, which targets other malicious actors as well as security practitioners and academics.
securitylabs.datadoghq.com/articles/mut...
securitylabs.datadoghq.com/articles/mut...
Getting a taste of your own medicine: Threat actor MUT-1244 targets offensive actors, leaking hundreds of thousands of credentials | Datadog Security Labs
This post describes an in-depth investigation by Datadog security researchers into a threat actor dubbed MUT-1244, which targets other malicious actors as well as security practitioners and academics.
securitylabs.datadoghq.com
December 17, 2024 at 6:51 PM
Good collab with @christophetd.fr last week!
Reposted
Awesome, Stratus Red Team v2.20.0 is now available 🎉
Stratus Red Team v2.20.0 is now available, with great contributions from @flekyy90.bsky.social allowing you to reproduce AWS TTPs seen in the wild!
➔ Use GetFederationToken to generate temporary credentials
➔ Use SendSerialConsoleSSHPublicKey to pivot to EC2 instances
github.com/DataDog/stra...
➔ Use GetFederationToken to generate temporary credentials
➔ Use SendSerialConsoleSSHPublicKey to pivot to EC2 instances
github.com/DataDog/stra...
December 4, 2024 at 5:52 PM
Awesome, Stratus Red Team v2.20.0 is now available 🎉
Reposted
New Datadog threat research just dropped! We found a cluster of activity publishing ~a ton~ of malicious packages across PyPi and npm. Leveraged GitHub to host two stealer binaries and exfiltrated data to Telegram. https://buff.ly/3Ol7bBu
November 22, 2024 at 7:28 PM
New Datadog threat research just dropped! We found a cluster of activity publishing ~a ton~ of malicious packages across PyPi and npm. Leveraged GitHub to host two stealer binaries and exfiltrated data to Telegram. https://buff.ly/3Ol7bBu