Thomas Knudsen @Knudsec
Red Team | former CTI & @CuratedIntel Member Japan Joined December 2019-
Tweets211
-
Followers211
-
Following985
-
Likes266
@sekoia_io @sekoia_io is it possible to get a link to the list of tools per actor? trying to map these out is difficult by tracing the tiny lines >.< its quite painful!
ICYMI: Excellent @ReliaQuest threat report on Scattered Spider, which is now running with the RansomHub RaaS 🔎 They used social engineering against the help desk to compromise the CFO’s account and then socially engineered the helpdesk to get DA too 🤦♂️ reliaquest.com/blog/scattered…
As far as pivoting is concerned in CTI, you can pretty much do it all between @virustotal, @censysio & @urlscanio 🐧 I have taken all Artifact types and their features from the Awesome Pivot Atlas maintained by @AmitaiCo & mapped it against sources & where to find them Links ⬇️
I just came across a tool called AttackGen. It's a simple tool that generates incident scenarios based on a Threat Actor and suggests simulations and possible detections at a high level. #llm #python #threatintel 👉 code: github.com/mrwadams/attac… 👉 app: attackgen.streamlit.app
🔎 Tracking 5⃣ ALPHV/BlackCat 🐈⬛ ransomware affiliates in @MaltegoHQ #infosec #cti
🔎 Tracking 5⃣ ALPHV/BlackCat 🐈⬛ affiliates: > DEV-0237/PistachioTempest ++ Ryuk, Conti, Hive > Storm/DEV-0501 ++ Hive, Sabbath/54bb47h > DEV-0504/VelvetTempest ++ Ryuk, REvil, BlackMatter, LockBit, Conti > DEV-0832/VanillaTempest ++ ViceSociety, Quantum, Zeppelin) > UNC4466
Here is my first set of #YARA rules to detect the backdoored XZ packages Report openwall.com/lists/oss-secu… Rules github.com/Neo23x0/signat… #XZ #XZutil
Uncovering APT Infrastructure with Passive DNS Pivoting This time we're taking a @MsftSecIntel APT report and identifying an additional 122 similar domains using @ValidinLLC embee-research.ghost.io/uncovering-apt… #malware #threatintel
🤝For the last months, our World Watch team collaborated with @sekoia_io TDR team to investigate and demystify Residential Proxies #RESIP and highlight their systemic growth and the transparency issues surrounding their sourcing ⤵️ orangecyberdefense.com/global/blog/re… #cti @orangecyberdef
🔥New blog! #Phobos Ransomware: Analysing associated infrastructure used by #8Base Infrastructure: 45 domains, 22 IPs in 🇩🇪🇪🇪 Capability: #Smokeloader, #SystemBC medium.com/@Intel_Ops/pho… Findings below:
@embee_research @censysio dude, you have been killing it. Thank you for all the great resources these days!
📊 Cyber Threat Intel Metrics Nice infographic breakdown across: * Strategic - executives * Tactical - managers * Operational - security analysts And varying levels of maturity By @gertjanbruggink github.com/gertjanbruggin…
Decoding a Cobalt Strike Loader with Cyberchef and Emulation A short video looking into a common CS loader and methods for extracting C2 addresses from Shellcode 😁 youtu.be/YDtLmhw_nTo?fe… #Malwareanalysis #Cobaltstrike
6. With all the issues, i still am using the mouse for the time being. Curious how the small one will be whenever i get that. As long as finalmouse keeps improving on the qc issues then i dont mind testing the mouse. Just needs more stability and consistency with the build.
5. the main 2 mouse clicks actually dont feel that great to me stability wise, and if you look at the front of the mouse when you press down on the main 1 and 2 click buttons, you can see that the buttons touch the base of the mouse.. so it basically can grind on it. needs tuning
Just got my first finalmouse (mouse) ever. Absolutely amazing AND amazing shipping to delivery time (im in Japan and it came 4 days earlier than expected!) @finalmouse thank you so much for everything. Really pleased with everything on the mouse. One small critique below
@nyloudpackz @finalmouse yea i see now, thanks for sharing. For me this isnt an issue because im mainly gripping with relaxed claw and the back of my palm barely touches the mouse- just enough for stability of aim. To me flex isnt an issue if silent, its the creaking that would be because it can distract
James Rose @rose595604
46 Followers 385 Following Am here for serious relationship with someone that he won't hurt me or take advantage of me 🥺
Johnny @Luckyrocky2028
252 Followers 7K Following Stay Hungry, Stay Foolish. Only those who are self-disciplined can attain true freedom.|No Politics.
冥灯教 @mingdengjiao
19 Followers 300 Following 这是一个被狗庄反复迫害的群体,我们开多,狗庄砸盘,爆我们。我们开空,狗庄拉盘,爆我们。我们聚集在一起,心除三界,魔乱神明,按照我们的想法继续开仓。
Cyber Cowboy @cybercowboysec
1 Followers 161 Following
Yeeb @Yeeb_
319 Followers 497 Following Penetration tester, red teamer and capture the flag player with incident response experience.
André Kachlov @AKachlov7141
1 Followers 123 Following
Yone Souda @YoneSouda
5 Followers 355 Following
Balkrishna Jadhav @hacker3j
803 Followers 7K Following AVP - Threat Hunting @ Kotak Mahindra Bank| Senior Threat Intelligence|Forensicator|MindHunter| Innovator|Malwarologist|Espionage||Inventor
solst/ICE of Astarte @IceSolst
31K Followers 2K Following Voidweaver @AstarteSecurity - Pentester turned seceng turned meeting canceller - meetup https://t.co/E4rlINC0U6 - conf tracker https://t.co/tReNhuhANF
🏴☠️ ℕ𝕒... @NaturalWalker_
129 Followers 550 Following All In, become insane to your craft 🇫🇷#GodofWar #theLastPirate
Binary_Badg3r @_dmart
142 Followers 2K Following
Joshua Penny @josh_penny
2K Followers 908 Following Senior Threat Intelligence Analyst @Bridewellsec
annumeena @annumeena19
75 Followers 7K Following
Carlos Mayorga @Sud0Chul0
536 Followers 7K Following System Administrator | Fortinet | Azure | Entra | #cybersecurity
Heimdall @deathorsufferin
66 Followers 414 Following
Sesmeson @Sesmesonsa2hVT
7 Followers 252 Following
Quinn @SpewffuetTEHW
8 Followers 602 Following
IzayoiSakuya @AshesCute
0 Followers 2 Following
Ethan Marshall @FRACTUREDSTACK
17 Followers 198 Following Offensive Security Researcher • 👾 Exploit Development, 🧩 Reverse Engineering, 🦠 Malware Analysis | GREM, SSCP, CySA+, BTL1
exlagsx @Exodia6542
140 Followers 1K Following 🖥️ Inzusiast and resercher | actively fighting cybercrime. 🪐
RussianPanda 🐼 �... @RussianPanda9xx
19K Followers 595 Following badass @HuntressLabs | Researcher @ https://t.co/vqtwIGbXlW | Malware Addict | Volunteer @TheDFIRReport | YouTube: https://t.co/N8bPp4P37z
SystemTek - Technolog... @SystemTek_UK
2K Followers 5K Following Welcome to SystemTek - Est 1999, find the latest tech news and information at https://t.co/I9t1QXbRbr
sec_leabhart @sec_leabhart
3 Followers 206 Following I do cybersecurity or something like that sometimes. Main acct is @leabhart.
Lexie Aytes @cybseclex
78 Followers 404 Following Threat Researcher @ Google/Mandiant | just here for the memes | opinions are my own
rewscel @rewscel
29 Followers 741 Following
⚡ Threat Echo @ThreatEcho
114 Followers 334 Following Reflecting Threats ⚡, Amplifying Defense. ⚔ Advanced adversary simulation for real-time cybersecurity insights. #CyberSecurity #ThreatIntel #AdversarySimulation
Bute AI Cryptocurrenc... @V3H0sS3VIqYs88m
9 Followers 149 Following No need to stay up late to watch the market; Experience 24 hours to earn 1k-10k profit! https://t.co/uv1G6Kfi5B
MikeWavada @WavadaMike
338 Followers 5K Following Cyber specialist specializing in Imposter Syndrome. Former USMC. Currently with Prestige Worldwide. Likes Nickelback.
Gregory Lupton @GregoryLupton
43 Followers 216 Following
Nic Finn @NeodymiumPhish
355 Followers 446 Following Dad | Husband | Tinkerer | Former USAF & AFOSI Agent | CTI | Opinions all mine
SLEUTHCON @SLEUTHCON
3K Followers 1K Following SLEUTHCON ‘26 CFP and registration are now open! https://t.co/vRns0Do5xa
Shina Mashiro @ShiinaaM
389 Followers 4K Following
Josh Stroschein | The... @jstrosch
12K Followers 1K Following Reverse engineer and content creater | 😱 1M+ views on YT | 🎙️ Host of Behind the Binary podcast 👇
Stephan Berger @malmoeb
29K Followers 1K Following Head of Investigations @InfoGuardAG https://t.co/A5lnFAu7eX
Saurabh Gunjal @gunjalsaurabh01
129 Followers 573 Following 💡Frontend wizard specializing in React ⚛️ | Creating seamless user experiences ✨ | Let's bring your project to life! #FrontendDeveloper #ReactSpecialist 🎨🚀
. @0x75f_
169 Followers 5K Following
Ryan "Chaps" Chapman @rj_chap
8K Followers 3K Following Threat Hunter. DFIR & Malware Analyst. @sansforensics Author (FOR528) & Instructor (FOR610). Husband & father. Retro gamer too! Comments = own.
MaTT @MattDoubletT
10 Followers 313 Following
R̶a̶v̶i̶d̶ Ravee... @raveedl
197 Followers 1K Following product, threat intelligence person • opinions are presumably my own but actually just part of the collective unconscious • need to shitpost more
Jonathan Gonzalez �... @godslittlemacro
2K Followers 2K Following Incoherent rants are my own intellectual property. ex-DFIR, now CTI. It's either memes, infosec, or activism. Unfollow accordingly.
Yeeb @Yeeb_
319 Followers 497 Following Penetration tester, red teamer and capture the flag player with incident response experience.
Marcello @byt3bl33d3r
30K Followers 821 Following CyBeRsEcUrItY | Not afraid to put down with some THICC malware on disk | AI Research @PaloAltoNtwks | former purple team | Ex @spacex
Altered Security @AlteredSecurity
9K Followers 2K Following Global leader in hands-on learning for enterprise and cloud security education. Join 50000+ infosec professionals from 130+ countries
MalDev Academy @MalDevAcademy
20K Followers 8 Following Providing specialized, module-based security training and resources designed for cyber security professionals
Adam Chester 🏴�... @_xpn_
39K Followers 545 Following Hacker for Hire at @SpecterOps | Blog at https://t.co/tjfTOlmau2 | Insta at https://t.co/PqR6CZQ48T
Marcelo Rivero @MarceloRivero
5K Followers 151 Following Sr. macOS Malware Research Lead @Malwarebytes • ex-Microsoft MVP • Focusing on cross-platform (macOS/Linux/Win) threat analysis • Founder @InfoSpyware
Cookie Connoisseur @browsercookies
2K Followers 96 Following Ex-Unit 350: Elite cookie ops. Perfect bake temp. No ties to Unit 8200.
Cyber Team @Cyberteam008
3K Followers 62 Following Threat Hunting | APT Tracking | Malware Analysis | Darkweb Monitoring "Unity is Strength"
Shanholo @ShanHolo
2K Followers 367 Following Another blue team member…..#CSIRT #DFIR #Malware #4n6 #ThreatIntel and following the white rabbit...
Hossam @0xHossam
1K Followers 2K Following AdvSim / Red Team @CyShieldCompany /\ interested in malware, ad, red team, windows security research and wanna be red team ninja
solst/ICE of Astarte @IceSolst
31K Followers 2K Following Voidweaver @AstarteSecurity - Pentester turned seceng turned meeting canceller - meetup https://t.co/E4rlINC0U6 - conf tracker https://t.co/tReNhuhANF
John Althouse @4A4133
3K Followers 226 Following Founder & CTO at FoxIO Inventor of the JA4+ network fingerprinting suite. Also, JA3/S (TLS) HASSH (SSH) CYU (QUIC) JARM (TLS Servers)
Group-IB Threat Intel... @GroupIB_TI
17K Followers 182 Following Official account of the @GroupIB Threat Intelligence Unit. Latest research, analytics, IOCs and threat alerts.
Joshua Penny @josh_penny
2K Followers 908 Following Senior Threat Intelligence Analyst @Bridewellsec
Silent Push Labs @silentpush_labs
616 Followers 45 Following Hi there, we've moved to @silentpush. Follow us there for updates!
Jeffrey Appel | Micro... @JeffreyAppel7
3K Followers 259 Following Microsoft MVP | Cloud Security Consultant | Microsoft 365 Defender #MDE | Azure | Sentinel | #M365D #XDR #EDR | Tweets are my own | blogger @ https://t.co/pAgXLcis0E
Panos Gkatziroulis �... @ipurple
27K Followers 827 Following Red/Purple Teamer | Blogger | Ex-Director @pentestlabltd | Mod @ https://t.co/1nzjl9KpSH | https://t.co/mIM1GA1mN4
Ethan Marshall @FRACTUREDSTACK
17 Followers 198 Following Offensive Security Researcher • 👾 Exploit Development, 🧩 Reverse Engineering, 🦠 Malware Analysis | GREM, SSCP, CySA+, BTL1
Yashraj Solanki @RustyNoob619
1K Followers 359 Following Threat Intel @bridewellsec (All tweets are my views) Build | Track | YARA #100DaysofYARA 2026
MetallicHack @MetallicHack
838 Followers 389 Following 🇨🇵 Cybersecurity engineer enjoying Windows & AD security, DFIR and detection engineering @TheDFIRReport analyst
CVETrends @CVEShield
2K Followers 112 Following
Anis Haboubi |₿| @HaboubiAnis
5K Followers 893 Following Cyber Threat Intelligence Analyst | Decentralized Autonomous Financial Resistant | #bitcoin #opreturn #defi
C2IntelFeedsBot @drb_ra
5K Followers 0 Following Mostly here for posting C2s. Thank you to @modat_magnify for the raw data. Grateful to @censysio for the support in past years.
Jack @ToxicxEternity
8K Followers 458 Following Heavy Metal Video Game Covers // @SingularityAZ Guitarist // Listen to my music on Spotify: https://t.co/CHo48LwGBS / Twitch: https://t.co/bHS7fXf84T / is epic
SLEUTHCON @SLEUTHCON
3K Followers 1K Following SLEUTHCON ‘26 CFP and registration are now open! https://t.co/vRns0Do5xa
George Hotz 🌑 @realGeorgeHotz
304K Followers 203 Following President @comma_ai. Founder @__tinygrad__
HotCakeX ✡︎ סג�... @CyberCakeX
3K Followers 260 Following XX | Microsoft MVP | AppControl Manager Author & Harden Windows Security maintainer Check GitHub for info👇 https://t.co/0CY05Hz8jf
Clint Gibler @clintgibler
26K Followers 572 Following 🛡️ Leading Cyber at @OpenAI 📚 Creator of https://t.co/xwtIAI0CuJ newsletter
R̶a̶v̶i̶d̶ Ravee... @raveedl
197 Followers 1K Following product, threat intelligence person • opinions are presumably my own but actually just part of the collective unconscious • need to shitpost more
Intel-Ops @Intel_Ops_io
2K Followers 4 Following Adversary Infrastructure Hunting & Training Curated Threat Intelligence Feed (Coming Soon) https://t.co/N9OKrTrvV0 https://t.co/3YFZfEbgpI
Jon DiMaggio @Jon__DiMaggio
9K Followers 883 Following Bad guy chaser, writer/author, espionage & ransomware SME. Sometimes I harass my dog. He is the brains behind these projects and opinions are his.
1ce7ea @1ce7ea
1K Followers 159 Following
Ralph @data_cybers
75 Followers 671 Following Data nerd lost in Cyber. Membership: @curatedintel Interested in #infosec #hacking #osint #dfir #cti
SECurityTr8Ker @SECurityTr8Ker
4K Followers 5 Following I used to monitor the SEC's RSS feed for 8-K filings disclosing cybersecurity incidents. Last review: 2025-08-04 10:15 ET
Gary Williams @GaryWilliamsIT
3K Followers 2K Following IT Bod | Spiceworks moderator | Fascinated by logistics | Tea fixes all problems.
Calypto @CaIypto
4K Followers 67 Following Hardware/software optimization for lower latency - Latency guide: https://t.co/DH7z2Prg0c
𝚃𝚊𝚌𝚝𝚒�... @OSINT_Tactical
21K Followers 3K Following 🥇2024 NMP Hackathon 1st place | 3x @Tracelabs Gold Badge 🥇| 3x Silver Badge 🥈 | 1x Bronze Badge 🥉| https://t.co/z76OiEDpYO
























