BlueTeamSec

Following NoName057(16) DDoSia Project’s Targets (blog.sekoia.io)

Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution (www.securityjoes.com)

The Enemy Within: Threat Actors Target Subdomains of Trusted Global Brands in Mass Open Redirect Abuse. (www.silentpush.com)

DNS Analyzer - Finding DNS vulnerabilities with Burp Suite (sec-consult.com)

A technical analysis of the SALTWATER backdoor used in Barracuda 0-day vulnerability (CVE-2023-2868) exploitation (cybergeeks.tech)

Research: Zero-Day Shop (www.cyfirma.com)

Confused about the drama with the new BreachForums? Reading this will either help you or make your head spin (www.databreaches.net)

Bluepurple Pulse: week ending June 25th (bluepurple.binaryfirefly.com)

Beyond the Horizon: Traveling the World on Camaro Dragon’s USB Flash Drives (research.checkpoint.com)

Graphican: Flea Uses New Backdoor in Attacks Targeting Foreign Ministries (symantec-enterprise-blogs.security.com)

Dissecting TriangleDB, a Triangulation spyware implant (securelist.com)

Unpacking RDStealer: An Exfiltration Malware Targeting RDP Workloads (www.bitdefender.com)

BlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage Activities (www.recordedfuture.com)

Tracing Ransomware Threat Actors Through Stylometric Analysis and Chat Log Examination (medium.com)

CID Lookout: Unsolicited Smartwatches Received by Mail (www.cid.army.mil)

win32-app-isolation: Tools and documentation for Win32 app isolation (github.com)

openfire鉴权绕过漏洞原理解析 - Openfire Authentication Bypass Vulnerability Principle Analysis (mp-weixin-qq-com.translate.goog)

Korean reporting on the Lazarus fake recruiter campaign implant (download.hauri.net)

한국내 macOS 이용자를 노린 APT37 공격 등장 - APT37 attack targeting macOS users in Korea (www.genians.co.kr)

Inside of the WASP's nest: deep dive into PyPI-hosted malware (blog.virustotal.com)

Uncovering a New Activity Group Targeting Governments in the Middle East and Africa - Palo Alto Networks Blog (www.paloaltonetworks.com)

Resident Campaign (www.esentire.com)

The Experience of Cybercrime in Georgia: Awareness, Victimisation and Reporting (rusi.org)

Fragments of Cross-Platform Backdoor Hint at Larger Mac OS Attack (bitdefender.com)

DoNot APT Elevates its Tactics by Deploying Malicious Android Apps on Google Play Store (www.cyfirma.com)