Tessera

Folgen

Konstantin

@konstantinklinger.bsky.social

Threat Detection & Research at Proofpoint

0 Posts98 Follower 83 Folgt

Saher @saffronsec.bsky.social · 2w ago

Most exciting @threatinsight.proofpoint.com drop yet - in collaboration with NSA - and the product of @greg-l.bsky.social's blood, sweat, and tears. Research into two Russian actors throwing half-click exploits against mailservers. Part 1 on TA488 / Void Blizzard www.proofpoint.com/us/blog/thre...

TA488 Targets Zimbra Mailservers with Half-Click Exploits | Proofpoint US

Proofpoint is releasing this report in coordination with NSA and FBI’s JSAC reporting about TA488/Void Blizzard, which can be found here. This is part 1 of a 2-part blog series Proofpoint is

proofpoint.com

ThreatInsight @threatinsight.proofpoint.com · 5mo ago

Proofpoint identified a targeted campaign against operations personnel at energy firms linked to projects in Pakistan. The messages were sent on 18 March 2026, and mimicked invitations to the upcoming Pakistan Energy Exhibition & Conference (PEEC). We track the activity as UNK_VaporVibes. 1/8

Saher @saffronsec.bsky.social · last yr.

From phishes to hands-on-keyboard commands 🔥 new @proofpoint.bsky.social research from @nickattfield.bsky.social and @konstantinklinger.bsky.social on Indian state-sponsored actor TA397 (Bitter) with a great story on the steps to technical and political attribution www.proofpoint.com/us/blog/thre...

The Bitter End: Unraveling Eight Years of Espionage Antics—Part One | Proofpoint US

This is a two-part blog series, detailing research undertaken in collaboration with Threatray. Part two of this blog series can be found on their website here. Analyst note: Throughout

proofpoint.com

Nick Attfield @nickattfield.bsky.social · last yr.

Dropping some joint research today with Threatray on TA397/Bitter 🔍 We dive into the confluence of signals that led us to our attribution of the threat actor 🎯 Shoutout to @konstantinklinger.bsky.social and Threatray for collaborating on this research. www.proofpoint.com/us/blog/thre...

The Bitter End: Unraveling Eight Years of Espionage Antics—Part One | Proofpoint US

This is a two-part blog series, detailing research undertaken in collaboration with Threatray. Part two of this blog series can be found on their website here. Analyst note: Throughout

proofpoint.com

Wesley Shields @wxs.bsky.social · 2y ago

If you like to use python and are interested in YARA rule linting:

Nick Attfield @nickattfield.bsky.social · 2y ago

Dropping some new research on TA397/Bitter 🚨 Hidden in Plain Sight | TA397’s New Attack Chain Delivers Espionage RATs Report: www.proofpoint.com/us/blog/thre...

Hidden in Plain Sight: TA397’s New Attack Chain Delivers Espionage RATs | Proofpoint US

Key findings Proofpoint observed advanced persistent threat (APT) TA397 targeting a Turkish defense sector organization with a lure about public infrastructure projects in Madagascar. The attack...

proofpoint.com

ThreatInsight @threatinsight.proofpoint.com · 2y ago

Proofpoint has published a report detailing new activity from #TA397 (AKA Bitter), a prominent South Asian advanced persistent threat (APT) group. The campaign, which took place in November 2024, targeted a defense sector organization in Turkey. Read the blog: ow.ly/z81o50UshPt.

Hidden in Plain Sight: TA397’s New Attack Chain Delivers Espionage RATs | Proofpoint US

Key findings Proofpoint observed advanced persistent threat (APT) TA397 targeting a Turkish defense sector organization with a lure about public infrastructure projects in Madagascar. The attack...

ow.ly