Natto Thoughts examines HAFNIUM-linked hacker Xu Zewei and reveals ties between China’s state security agencies, cybersecurity firm and strategic industries.

https://nattothoughts.substack.com/p/hafnium-linked-hacker-xu-zewei-riding

Success! Mastodon found the person. Thank you!

I am looking for someone from #italy that used the online handle Lex Tutor from at least 2010-2019. Lex hates #spam and was very vocal about spam groups.

If the #mastodon community can help me find the real person, I would be grateful..

Lex had insights into criminals that we are hunting today.. and I would love to interview them.

Appreciate the boosts to see if the Kevin Bacon game will work.

#cybercrime #scam

#Remcos #malware is now at v7.0. No significant changes to the payload side, but improvements to enhance reliability and address bugs based on operator experience added.
Samples:
tria.ge/250709-3vxwa...
tria.ge/250710-vba87...

Looks to be distributed via email campaigns from reboundue[.]com emails

In 3 days, a slick new UK edition of Sandworm comes out with a new cover and new foreword that aims to capture in a few pages the events of the 5+ years since the book first published: www.amazon.co.uk/Operation-Sa...

The publisher has tweaked the title to "Operation Sandworm" for UK reasons I don't entirely understand, but it's the same book, and hopefully will now reach a new audience.

https://www.amazon.co.uk/Operation-Sandworm-Hunt-Kremlins-Invisible/dp/1800963130

For those who are interested, I recently did a live session demoing Helix, my new go-to text editor, for members of @thetaggartinstitute community. Enjoy!

https://youtu.be/QullbX0JKq8

The slides from our @recon talk, "Breaking Mixed Boolean-Arithmetic Obfuscation in Real-World Applications" (CC @nicolodev are now online!

Slides: https://synthesis.to/presentations/recon25_mba_obfuscation.pdf

Plugin: https://github.com/mrphrazer/obfuscation_analysis