Pepper
@femmeshoto
Followers
267
Following
1K
Media
38
Statuses
158
When you want to open a restaurant but decision making isn't your thing?
0
0
6
This is what happens when you put me in charge of team building. We are on point. @captainGeech42 @thinkpoison @tiskimber @p1tb00l
3
0
16
"Mandiant has observed wide exploitation of a zero-day vulnerability in the MOVEit Transfer secure managed file transfer software for subsequent data theft." UNC4857 observed actively deploying the LEMURLOOT webshell post-exploitation. https://t.co/ENR72Gf4hK
cloud.google.com
1
46
74
7 yrs ago @whippit_ and i founded @vtxproject with a @DARPA mission to empower intelligence analysts. In the last 2 years, we have 4X'd our # of customers. Every single one is high-impact. Thanks for the amazing support and feedback! Keep it coming, we're just getting started!
7
8
77
Sometimes new evidence provides justification to merge threat clusters. Other times, @captainGeech42 be like...
1
0
6
The week after finalizing one of our team's biggest reports of the year.
2
1
16
Excited to report that our fincrime team now has a shark-uterie board. Because reasons.
2
0
29
Registration and Call for Papers is now open for SLEUTHCON! From the folks who brought you CYBERWARCON, SLEUTHCON (formerly BRUNCHCON) is a cybercrime-focused conference coming May 12th to Arlington! Please RT! 1/x
sleuthcon.com
1
54
79
Mandiant cybercrime experts @tiskimber and @femmeshoto took a good look at SHELLSTING (AKA BUMBLEBEE), which appears to have replaced the use of BAZARLOADER among ransomware crews. 5/x
1
5
9
#parrot tip: feed your birds a "chop" - a healthy mix of grains and diced vegetables. This provides daily foraging activities as they pick around the vegetables as expertly as a toddler.
0
2
5
Our final talk for today is from @tiskimber and Genevieve Stark, who will be discussing a common loader called SHELLSTING, also known as Bumblebee. #BRUNCHCON
1
5
21
Genevieve shares a few common clusters around SHELLSTING, including follow-on payloads like Vidar (which was also discussed by @cglyer. #BRUNCHCON
1
1
3
Now @tiskimber and Genevieve Stark on the SHELLSTING loader, which could be a replacement for BazarLoader
1
3
12
“Even when we use the same names, we don’t mean the same thing.” @femmeshoto talking about the Elusive Rosetta Stone at #mwise
0
1
11
Animal crossing signs observed in #scotland thus far: deer, otter, red squirrel, cow, sheep, and feral goat. 🤷♀️
1
1
5