Note to Blue Team folks. Anti-phishing education is great. Periodic phishing awareness campaigns are also great. However, make sure to clarify what legit email looks like so if you ever have to mail your employees something that requires them to click on a link, they don't dismiss it as yet another phishing test.

Ok, so I wrote up a quick piece on the spurious and bullshit "dispute" over the Dec 16 crowdstrike D-30.apk blog post. They made a minor error allowing their credibility to be called into question. I provide additional data + analysis to spike that bollocks: https://medium.com/@thegrugq/voice-of-russia-50ae874777ca

Surprise Bitches! @thegrugq https://www.youtube.com/watch?v=wP2J9aYM6Oo