0x7fff9 Profile Banner
Guido Not CISSP® 🔹 Profile
Guido Not CISSP® 🔹

@0x7fff9

Followers
5K
Following
6K
Media
443
Statuses
7K

My tweets belong to Rei Gohb, Mestre Alves, Bruxo de Fafe and even Paulo Futre. On the Internet, nobody knows you're a ship 🛳 #MalwareHunterTeam

https://keybase.io/0x7fff9
Joined December 2016
Don't wanna be here? Send us removal request.
@0x7fff9
Guido Not CISSP® 🔹
3 years
OK security vendors, we again come to help you. AT=PAST ORIGIN=*new [2018]* (years ago as said!) https://t.co/Kr0J779m9V
@malwrhunterteam
MalwareHunterTeam
3 years
Currently here the first page of Google search results for "agent tesla malware" shows @BlackBerry, @qualys, @malpedia simply saying it's a RAT - sad. But then comes @CheckPointSW, saying "is an example of an advanced remote access trojan (RAT)" - WTF? It's a fucking skidware...
1
0
4
@malwrhunterteam
MalwareHunterTeam
3 years
Currently here the first page of Google search results for "agent tesla malware" shows @BlackBerry, @qualys, @malpedia simply saying it's a RAT - sad. But then comes @CheckPointSW, saying "is an example of an advanced remote access trojan (RAT)" - WTF? It's a fucking skidware...
@malwrhunterteam
MalwareHunterTeam
3 years
@unpacme Just a little note: Agent Tesla (which is with this name is dead from years ago, no idea what it's called today) is not a RAT.
2
3
16
@malwrhunterteam
MalwareHunterTeam
3 years
😂
2
8
60
@0x7fff9
Guido Not CISSP® 🔹
3 years
Uau! One day we’ll all be 90yo and this malware will still be a thing! hahah 😇😇⚡️⚡️
@JAMESWT_WT
JAMESWT
3 years
"ordine urgente" spam email spread #AgenTesla Attached Rar is pw protected but pw is not specify Password is the file name 🤪 Rar https://t.co/R0ONJOnMwM Exe https://t.co/K9O995hCYi Exfil smtp.all-tsc].com Port: 587 Username / Email To: menshova.v@all-tsc.com
0
0
1
@malwrhunterteam
MalwareHunterTeam
3 years
He's in a much fucked up situation in Colombia... Anyone from there follows us who can help him? Thanks. cc @1ZRR4H
@0x7fff9
Guido Not CISSP® 🔹
3 years
Can someone help me, please? 🫠🧎
3
8
6
@0x7fff9
Guido Not CISSP® 🔹
3 years
Can someone help me, please? 🫠🧎
0
1
1
@malwrhunterteam
MalwareHunterTeam
4 years
Seriously, just sitting and looking at the cats sleeping in the garden is even more interesting than looking at different APT's shitty boring junk samples... 😂
1
1
16
@malwrhunterteam
MalwareHunterTeam
4 years
And if we talk about Talos, also this. How many fucking times it has to be repeated that a big part of AV vendors/threat intel/etc companies fucking want actors to continue working so that their work continues to be "useful" so they can get sales of their shits -> 💰. That's it.
2
2
11
@malwrhunterteam
MalwareHunterTeam
4 years
Hello, @Lookout...
@malwrhunterteam
MalwareHunterTeam
4 years
"HoMobile.apk": 6eeb683ee4674fd5553fdc2ca32d77ee733de0e654c6f230f881abf5752696ba
1
5
27
@malwrhunterteam
MalwareHunterTeam
4 years
Tweet about "avg" malware: - ~ no one cares - some company releases a report about it later (high chances w/o mention to you, obviously) Tweet about "APT" malware: - ~ no one cares - some company releases a report about it later (high chances w/o mention to you, obviously) 😂 😫
0
4
19
@malwrhunterteam
MalwareHunterTeam
4 years
My favourite button recently. Let's hope it won't change to the one under that soon... 😂
0
4
11
@malwrhunterteam
MalwareHunterTeam
4 years
Great to see people who say something as a fact and not only not provide proofs/evidences of it, but not even said one single thing which could suggests that what they claim is right suggesting us to validate claims... 😂 🤦‍♂️
@malwrhunterteam
MalwareHunterTeam
4 years
@AuCyble Don't worry about that evidence, seen your article. Either you are full clueless or you do not know the meaning of "rebrand". There is not only 0 evidence/proof in your article showing it is a rebrand, but there is nothing which even only would suggest that. Nothing. So what now?
1
3
3
@vxunderground
vx-underground
4 years
Threat Intelligence trying to determine which new ransomware group is a fork and/or re-brand of Conti ransomware group
3
26
168
@vxunderground
vx-underground
4 years
.@lrvick bought the expired domain name for the 'foreach' NPM package maintainer. He now controls the package which 2.2m packages depend on. Information via @cyb3rops
14
170
679
@cyb3rops
Florian Roth ⚡️
4 years
14
182
788
@malwrhunterteam
MalwareHunterTeam
4 years
"Dark Angels" (skid?) ransomware gang's payment site looks like as if someone who has no much webdev knowledge would thrown something together... around 20 years ago. 🤦‍♂️ 😂
1
2
6
@cyb3rops
Florian Roth ⚡️
4 years
I enjoy these conversations with fake accounts on social media
14
18
261
@malwrhunterteam
MalwareHunterTeam
4 years
TIL about some very malicious IP addresses thanks to Comodo and CMC: 127.0.0.1 8.8.8.8 1.1.1.1 192.168.0.1 Block them all!!! 😂
33
81
489
@malwrhunterteam
MalwareHunterTeam
4 years
Today showed how much even "big names" dgaf to verify what they tweet about and just blindly tweet anything that sounds "sensational"... Fuck all of them. If you follow us enough long you know he isn't someone I like much, but today I seriously feel sorry for @bquintero. 😫
0
1
8
@vxunderground
vx-underground
4 years
vx-underground is proud to unveil its patented EDR (Endpoint Detection and Response) technology. This technology (or lack thereof) has proven to stop 100% of malware, hackers, crooks, and even insider threats!
22
63
481