BogeyBackdoor
@bogeybackdoor.bsky.social
I break into banks, spy on threats, drive a golf cart and play Lorcana VGhlIEFuYWx5c3QgZm9ybWVybHkga25vd24gYXMgWW9zaGk=
@threatinsight.proofpoint.com's TREE team continues to punch above their weight with some world class research.
Greg Lesnewich@greg-l.bsky.social · last wk.So remember last week when we said we hadn’t see TA488/Laundry Bear/Void since Feb? Well... We kinda lied Day before the release, we found em throwing a half click against Outlook to install one of the coolest implants we’ve ever examined: OWAReaper www.proofpoint.com/us/blog/thre...
🚨 New research: Proofpoint has identified a suspected China-aligned espionage cluster, UNK_MassTraction, exploiting multiple Roundcube n-day vulnerabilities to compromise mail servers at U.S. and Canadian universities. Analysis, infection chain & IOCs: www.proofpoint.com/us/blog/thre....
Anyone else not get their #sleuthcon swag as a virtual attendee? wondering if it got lost in the mail.
"humans are gloriously messy. agents are suspiciously efficient" #sleuthcon @sleuthcon.bsky.social
Mohammad wanted to get back at his enemies in the regime, by leaking their secrets to me. And he wanted to rekindle his relationship with the CIA, which had not ended on good terms. He was angry. He was determined. And he was desperate. www.theatlantic.com/magazine/202...
A Double Agent in Tehran
Mohammad Tajik claimed to be an Iranian intelligence officer and promised to reveal his country’s secrets. But first he had a game to play.
theatlantic.com
#ChangeMyMind #ElfOnTheShelf is a capitalist ploy to normalize a surveillance state to children.
New Iran banger from @saffronsec.bsky.social / @threatinsight.proofpoint.com just dropped. Full of good analytic tradecraft, Indicators and interesting lures showing how self aware Iranian cyber actors are... www.proofpoint.com/us/blog/thre...
Crossed wires: a case study of Iranian espionage and attribution | Proofpoint US
Proofpoint would like to thank Josh Miller for his initial research on UNK_SmudgedSerpent and contribution to this report. Key findings Between June and August 2025,
proofpoint.com
Ninja editing all references in $newjob's documentation from ProofPoint to Proofpoint.
a rainbow colored shooting star with the words the mo you know above it
ALT: a rainbow colored shooting star with the words the mo you know above it
media.tenor.com
Trying to decide if I should establish a threat actor naming schema based on flavors of Trader Joe's popcorn flavors
true analytic rigor comes from only opening your mouth when you have to and qualifying basically everything you say.
The tool has been released in the Proofpoint Emerging Threats public #GitHub for other defenders to leverage. Learn more about it here: brnw.ch/21wWSH0 #PDF #threatdetection #cyberthreat
Proofpoint releases innovative detections for threat hunting: PDF Object Hashing | Proofpoint US
Key findings Proofpoint created a new open-source tool for creating threat detection rules based on unique characteristics in PDFs called “PDF Object Hashing”. This technique can
brnw.ch
If your protest privacy/security advice does not start with a discussion of threat models, it is probably not good advice.
Matt Burgess (WIRED)@mattburgess1.bsky.social · 10mo agoNew from @agreenberg.bsky.social and me: For three years, security researchers pointed a satellite at the sky and found highly sensitive data being sent unencrypted They found: calls and texts on T-Mobile’s network; military info from the US and Mexico; in-flight Wi-Fi browsing, and a lot more
If you consider yourself a "Threat Intelligence Platform", don't email a spreadsheet of malicious indicators daily. That helps no one.
In addition to being one of history's most successful musicians, Taylor Swift has also successfully used a fire extinguisher.
Here’s what the Taylor swift and Travis kelce engagement taught me about B2B sales:
Suspected attribution...
a large pipe is pouring sand into a body of water surrounded by rocks
Alt: muddywater
media.tenor.com
StrikeReady Labs @strikereadylabs.com · 12mo agolarge trawling campaign against MFAs - specifically reps to Egypt Online Seminar.FM.gov.om.doc Online Seminar.MFA.gov.ct.tr.doc pivot: DPR for dredging in FreeSpan_16082025.2.doc c2 screenai[.]online 3ab16bd1c339fd0727be650104b74dd1 1de19958e7c2ef14addfb35b43a594ec e73ba93d008affdc4cce0cb4e18ae5c6
Phish & Chips.
ThreatInsight@threatinsight.proofpoint.com · last yr.NEW ‼️ Researchers at @Proofpoint revealed an increase in China-aligned cyber #espionage targeting Taiwan’s #semiconductor industry—a sector critical to the global tech #supplychain. At least 3️⃣ distinct China-aligned threat actors are behind the efforts. brnw.ch/21wUctY
New: A handful of Chinese-linked cyber espionage groups are stepping up targeting of Taiwanese semiconductor companies, per new analysis from @proofpoint.com. Campaigns include targeting of financial analysts focused on the sector as well: www.reuters.com/sustainabili...
Exclusive: China-linked hackers target Taiwan's chip industry with increasing attacks, researchers say
Chinese-linked hackers are targeting the Taiwanese semiconductor industry and investment analysts as part of a string of cyber espionage campaigns, researchers said on Wednesday.
reuters.com
Technically isn’t each and every one of us “years away from a nuclear weapon” when you really think about it?
Dropping some joint research today with Threatray on TA397/Bitter 🔍 We dive into the confluence of signals that led us to our attribution of the threat actor 🎯 Shoutout to @konstantinklinger.bsky.social and Threatray for collaborating on this research. www.proofpoint.com/us/blog/thre...
The Bitter End: Unraveling Eight Years of Espionage Antics—Part One | Proofpoint US
This is a two-part blog series, detailing research undertaken in collaboration with Threatray. Part two of this blog series can be found on their website here. Analyst note: Throughout
proofpoint.com
