Luke Jenkins @LukeJenx
I does cyber Joined September 2009-
Tweets52
-
Followers186
-
Following397
-
Likes490
New from Google Threat Intelligence: An actor who may be related to APT29 is abusing ASP to target Russian critics. Collaboration with our good friends @citizenlab. More info on the activity and TTP in the blog. cloud.google.com/blog/topics/th…
🆕🚨 New analysis from @Google TAG on suspected APT29 waterholes against 🇲🇳 gov. n-day exploits targeting iOS and Android we first observed in use from commercial surveillance vendors🫢 more details in the blog! awesome work from @_clem1 and team🤝 blog.google/threat-analysi…
LOOK!!! The #LABScon24 speaker lineup is so fire 🔥🚒🧯 labscon.io/speakers/
Let’s go ahead and kick this off cloud.google.com/blog/topics/th…
@AndrewCyberKop @gabby_roncone I probably deserve it...
Grateful to @RUSI_org for allowing me to share thoughts about the re-focusing of Russia’s cyber campaign to provide battlefield advantages to its conventional forces. Signals from mobile devices have become a prioritized form of targeting intelligence. rusi.org/explore-our-re…
Our latest research on SolarMarker's Multi-tiered Infrastructure recordedfuture.com/exploring-the-… @JulianVoeg
@c_APT_ure @HackingLZ @Mandiant Yes it looked like it's probably just the lea instructions that are in the incorrect order in the comment. But I'll double check when I jump online next.
@c_APT_ure @HackingLZ @Mandiant Let me take a look at this, could be I just never updated the comment itself whilst refining the rule. The binary pattern itself would be accurate.
In their latest blog post Mandiant's Luke Jenkins & Dan Black show how APT29 used a variant of the WINELOADER backdoor to target German political parties with a CDU-themed lure. mandiant.com/resources/blog…
APT29 (Midnight Blizzard/Cozy Bear) is targeting German political parties. The SVR has been on a tear lately and their mission of keeping Putin up to date on the West's thinking is especially important at this critical moment in the war. 1/2 mandiant.com/resources/blog…
New report from @Mandiant detailing APT29's expansion of interest beyond diplomatic missions. We judge this to be an early warning signal to other political parties and civil society groups across Europe/the West that they are also in the SVR's sights. mandiant.com/resources/blog…
Zimbra 0day targeting 🇬🇷🇲🇩🇹🇳🇻🇳🇵🇰 from earlier this year - used by multiple actors! New post from @Google TAGs @_clem1 @maddiestone @k_dennesen ! Mind the gap! blog.google/threat-analysi…
Russia’s Sandworm shifts to Living Off the Land techniques targeting Ukrainian power grid in a long history of attempting to terrorize the Ukrainian population. @Mandiant mandiant.com/resources/blog…
.@_clem1 discovered another ITW 0-day in use by a commercial surveillance vendor: CVE-2023-5217. Thank you to Chrome for releasing a patch in TWO 🤯day!! chromereleases.googleblog.com/2023/09/stable…
.@Mandiant researchers observed Russia's APT29, aka Cozy Bear, pursuing governments strategically aligned with Moscow as the threat group ramps up the scope and frequency of its espionage attacks. #cybersecurity #infosec #ITsecurity bit.ly/3LFCUwf
APT2⃣9⃣ has had a busy few months, new joint 🤝 work from @Google TAGs JA[n] and @Mandiant's @DanWBlack @LukeJenx. Watch out, we're just getting warmed up! mandiant.com/resources/blog…
Today, @Mandiant, collaboratively with @Google’s TAG, is releasing research on APT29’s increased pace of phishing activity against governments, foreign embassies, and other diplomatic entities in 2023. A few high-level takeaways below: 🧵 mandiant.com/resources/blog…
Check out @gabby_roncone and @DanWBlack’s latest blog post on the Russian GRU’s playbook in Ukraine based on findings first presented at #HagueTIX2023
As @Mandiant digs into ties btwn Russian disruptive and "hacktivist" actors conducting operations in Ukraine, we've seen technical and strategic patterns emerge. We outline these patterns during wartime in the GRU Disruptive Playbook. mandiant.com/resources/blog…
Janik Besendorf (bese... @jbesendorf
475 Followers 4K Following Fortschritt ist das Werk der Unzufriedenen "supposedly serious"
Simon Lewis @sheeparegreat
168 Followers 1K Following
Taagal @Taagal506
33 Followers 2K Following
IT CPE Academy @itcpecredit
268 Followers 3K Following Self-Study CPE Programs to help professionals acquire the skills, knowledge and certificates in IT and cybersecurity
Peter Clark @sarsaeroth
71 Followers 852 Following Cybersecurity researcher and PhD student. Threat intelligence researcher learning about offensive security. They/them.
theodorosc ⚡ @theodorosc
1K Followers 5K Following
Migo @MigoKed
1K Followers 1K Following A builder, a room, and AI. See what ships. @ Crowdstrike Building security products & teams. SentinelLabs Creator. CHKP → PANW → S1 → Office of the CEO @ CRWD
Counter Spyware Solut... @Numbers_STN
223 Followers 1K Following Am I Secure? is the only iOS app that detects the latest versions of advanced spyware like NSO Group’s Pegasus.
James Crosby @Cr0w_0x7D0
12 Followers 262 Following Network engineer by day, CTI analyst by night | Battle Master | Hacker | CCNA; BTL1; Security+
Dan Perez @MrDanPerez
5K Followers 1K Following Technical Lead, 🇨🇳 Mission @Google GTIG. Specializing in tracking and attribution of China-Nexus Threats, and making life difficult for them.
Messa @0x0a0d0d0a
29 Followers 2K Following
dougy @R3dHash
850 Followers 2K Following Cyber Threat Intelligence | OSINT | Misinformation | Threat Hunting
Theabominog @YungMu1a
7 Followers 124 Following The only reason i use twitter is because it came preloaded on my phone... Its not like im addicted to social media
Chris Sistrunk @chrissistrunk
10K Followers 4K Following Husband, Dad, ⚡EE⚡, Technical Leader @Mandiant ICS/OT, @BEERISAC #002, @BSidesJackson, @LaTech Alum, bbq engr, weirdo, klugemeister, #sockstatus #DJaaS, FSD
Chris Beckett @cbecks_2
818 Followers 2K Following Infosec and the Green Bay Packers. Interested in all things DFIR, Detection Engineering, Purple, and CTI. Opinions are mine, certainly not those of my employer.
Kaushik @kausrini
231 Followers 765 Following Reverse Engineering | Threat Intel | DFIR | Captcha verified human with own opinions (not employer's). @[email protected]
TomU | I'm still here... @c_APT_ure
8K Followers 6K Following #InfoSec professional, husband & father of two (in random order). #BlueTeam #DFIR #APT #CTI #RedTeaming #BSidesZH (RT/Likes ≠ endorsement) 👀➡️#MalwareChallenge
Joe Devanny @josephdevanny
3K Followers 6K Following Senior Lecturer | @warstudies @kingscollegelon | Politics & Security | Views mine.
Shesleigh @Shesleigh260825
7 Followers 861 Following Follow me, maybe it's the beginning of our fate, we can talk
. @0x75f_
167 Followers 5K Following
Berk Albayrak @brkalbyrk7
1K Followers 2K Following Security Engineer @trendyol | TI | OSINT | Cybercrime | TA2AQX 📡
PIVOTcon @pivot_con
997 Followers 276 Following Threat Research Conference in Europe - Malaga, Spain - 6-8 May 2026. #StayTuned #ComingSoon #PIVOTcon #PIVOTcon25
Victor Zhora @VZhora
2K Followers 1K Following Ukrainian military officer, Co-Founder @CERM260624, Board Member @ ICE Task Force, Ex-Deputy Chairman @SSSCIP, entrepreneur, scientist, athlete and musician
ghost @AnonGhostD07
832 Followers 2K Following Infosec and tech geek IT manager and father anonymous family #OpChildSafety #OpPedoHunt
cyka blyat @cykably77600460
0 Followers 80 Following
L², PhD @L_Lgde
839 Followers 3K Following DFIR, CTI & Malware Researcher | Head of CSIRT — ex-ANSSI Focus: Chinese APTs, Russia-linked actors, cybercrime | PhD (International Law)
Nick Vidal @nikolaipozdnii
93 Followers 817 Following Sr CTI Analyst @secalliance | @warstudies alum | Russia watcher & strategic culture evangelist | 🇺🇸 in 🇬🇧
Pasquale Stirparo �... @pstirparo
4K Followers 2K Following #ThreatIntel #ICS #DFIR; ''Learning iOS Forensics'' author; machofile dev; #BSidesZH #PIVOTcon24 organizer; pers.: @pstirparo_pers; https://t.co/AoJV9URXf6
Alex Delamotte @spiderspiders_
968 Followers 1K Following Threat Researcher @ SentinelLabs. Opinions are mine, you can’t have them.
winterknife 🌻 @_winterknife_
5K Followers 5K Following low-level developer with a focus on 𝙸𝚗𝚝𝚎𝚕 𝚡𝟾𝟼 ISA devices running 𝚆𝚒𝚗𝚍𝚘𝚠𝚜 | R&D @BHinfoSecurity | https://t.co/lyJL0y7qRZ
d3m0sth3n3s @_d3m0sth3n3s
647 Followers 859 Following cyber-physical DFIR/CTI. infrastructure is more than the grid. PCAP or it didn’t happen. she/her.
Richard Elphick @RichElphick
88 Followers 2K Following
Frode #Fella 🇺🇦... @FrodeHommedal
8K Followers 3K Following 🇺🇦🇳🇴🇨🇦 | Cybersecurity Advisor | Outspoken | Speaker | Veteran | Diver | Currently #NAFO | Used to be here for #infosec – now I’m here for #Ukraine
tanderson @notthanderson
0 Followers 2K Following
Austin Larsen @AustinLarsen_
2K Followers 1K Following Principal Analyst - Google Threat Intelligence Group Investigating significant cyber events.
Andy Moore @malwaresoup
1K Followers 277 Following Yet another cyber threat analyst. Standard "thoughts and opinions are my own" disclaimer
Alan Neville @abnev
1K Followers 3K Following Principal Intelligence Analyst @ Symantec. Views are my own etc. https://t.co/XK1XdeAyJr. Find me @abnev.bsky.social
Will @BushidoToken
39K Followers 3K Following Senior Threat Intel Advisor @TeamCymru Co-founder @CuratedIntel Co-author @SANSForensics FOR589 Co-founder @BSidesBournemth #126: REvil @darknetdiaries
Vicente Diaz @trompi
3K Followers 575 Following ThreatIntel Strategist at VirusTotal. Former Kaspersky - GReAT. APT hunter and Threat Intel war veteran. Progressive metal fan. Tweets are my own.
Julien Lafont ツ @julien_lafont
1K Followers 711 Following French Bartender / Alchimiste du Web / Former CTO @Hawk_Labs
d3m0sth3n3s @_d3m0sth3n3s
647 Followers 859 Following cyber-physical DFIR/CTI. infrastructure is more than the grid. PCAP or it didn’t happen. she/her.
Max Smeets @Maxwsmeets
5K Followers 1K Following @Virtualroutes @ETH_en @BindingHook. Author of NO SHORTCUTS (2022) & RANSOM WAR (2025)
Keir Giles @KeirGiles
20K Followers 3K Following Not really on Twitter any more; join me where the skies are bluer. The book: https://t.co/jXrccDINZf
Ottawa Bicycle Club @ottbicycleclub
1K Followers 9 Following Whether you just bought your first bike, have been biking on your own for a few months or are an experienced cyclist, the OBC has something for you
Royal Hansen @royalhansen
9K Followers 1K Following Vice President, Engineering, Google - Privacy, Safety, Security: Posts on InfoSec, Privacy, Data, AI, Counter Abuse and random stuff from life in CA; Tweets=own
Heather Adkins - Ꜻ ... @argvee
15K Followers 1K Following VP Security @Google, Co-Author "Building Secure and Reliable Systems" @r00t0wns, Medieval Historian
LiveOverflow 🔴 @LiveOverflow
161K Followers 1K Following wannabe hacker... he/him 🌱 grow your hacking skills @hextreeio
ESET Research @ESETresearch
36K Followers 32 Following Security research and breaking news straight from ESET Research Labs.
lcamtuf @lcamtuf
40K Followers 499 Following Blog: https://t.co/j7rfeVwqXc Homepage: https://t.co/iFAXZxCgg9
@mikko @mikko
225K Followers 952 Following Researcher and a best-selling author. Keynote talks at RSA, Black Hat & DEF CON. TED Speaker. Chief Research Officer at Sensofusion.
chompie @chompie1337
90K Followers 1K Following hacker, exploit developer/weird machine mechanic head of X-Force Offensive Research (XOR) @IBM
Yarden Shafir @yarden_shafir
26K Followers 329 Following A circus artist with a visual studio license
Benoît @benoitsevens
895 Followers 140 Following
PIVOTcon @pivot_con
997 Followers 276 Following Threat Research Conference in Europe - Malaga, Spain - 6-8 May 2026. #StayTuned #ComingSoon #PIVOTcon #PIVOTcon25
Marc Rogers @marcwrogers
16K Followers 1K Following Ramblings of Mad Englishman: Hacker @ BBC Real Hustle & Mr Robot. Head of Sec @ DEFCON. Founder @ CTI-League, Ransomware Taskforce, (He/Him).
jon greig @jgreigj
3K Followers 5K Following @TheRecord_Media cybersecurity reporter. formerly @zdnet @cambodiadaily @haitiantimes_ — send tips to [email protected] or signal: jgreig.51
Ollie Whitehouse @ollieatnowhere
6K Followers 1K Following CTO @NCSC Former: PortSwigger, Interrupt Labs, NCC Group, BlackBerry, Symantec and Atstake
Kate Morgan @Katz29
187 Followers 146 Following
L², PhD @L_Lgde
839 Followers 3K Following DFIR, CTI & Malware Researcher | Head of CSIRT — ex-ANSSI Focus: Chinese APTs, Russia-linked actors, cybercrime | PhD (International Law)
Adel Ka @0x4D31
5K Followers 3K Following Detection & Response Lead @perplexity_ai · ex-{OpenAI, Google} · views are my own
Virus Bulletin @virusbtn
61K Followers 1K Following Security information portal, testing and certification body. Organisers of the annual Virus Bulletin conference. @[email protected]
Nick Vidal @nikolaipozdnii
93 Followers 817 Following Sr CTI Analyst @secalliance | @warstudies alum | Russia watcher & strategic culture evangelist | 🇺🇸 in 🇬🇧
Pasquale Stirparo �... @pstirparo
4K Followers 2K Following #ThreatIntel #ICS #DFIR; ''Learning iOS Forensics'' author; machofile dev; #BSidesZH #PIVOTcon24 organizer; pers.: @pstirparo_pers; https://t.co/AoJV9URXf6
Alan Neville @abnev
1K Followers 3K Following Principal Intelligence Analyst @ Symantec. Views are my own etc. https://t.co/XK1XdeAyJr. Find me @abnev.bsky.social
Frode #Fella 🇺🇦... @FrodeHommedal
8K Followers 3K Following 🇺🇦🇳🇴🇨🇦 | Cybersecurity Advisor | Outspoken | Speaker | Veteran | Diver | Currently #NAFO | Used to be here for #infosec – now I’m here for #Ukraine
winterknife 🌻 @_winterknife_
5K Followers 5K Following low-level developer with a focus on 𝙸𝚗𝚝𝚎𝚕 𝚡𝟾𝟼 ISA devices running 𝚆𝚒𝚗𝚍𝚘𝚠𝚜 | R&D @BHinfoSecurity | https://t.co/lyJL0y7qRZ
Alex Delamotte @spiderspiders_
968 Followers 1K Following Threat Researcher @ SentinelLabs. Opinions are mine, you can’t have them.
Austin Larsen @AustinLarsen_
2K Followers 1K Following Principal Analyst - Google Threat Intelligence Group Investigating significant cyber events.
CyberWatchers @cyber_watchers
295 Followers 357 Following cyber security students interested in highlighting real world attacks
Jay Christiansen @_irongold
110 Followers 170 Following Red Team Lead at @Mandiant x Google. Views are my own.
Tom Hegel @TomHegel
7K Followers 871 Following Distinguished Threat Researcher, SentinelLABS Research Lead @SentinelOne. Nation-state operations, research systems & applied AI for threat intelligence.
Vlad Stolyarov @vladhiewsha
833 Followers 306 Following burn all the 0-days at Google Threat Intelligence Group
Victor Zhora @VZhora
2K Followers 1K Following Ukrainian military officer, Co-Founder @CERM260624, Board Member @ ICE Task Force, Ex-Deputy Chairman @SSSCIP, entrepreneur, scientist, athlete and musician
Ankur @Ankuryogi11
240 Followers 6K Following
Pierre B. @Horgh_rce
1K Followers 974 Following French guy interested in reverse engineering / malware analysis / threat intel.
Jung-hwan Kang @ultractt
127 Followers 472 Following Cyber Security Researcher. Open Source Summit North America 2017/2018/2020/2021 Speaker, Blackhat Asia 2017 Speaker, Open Source Developer.
Holger Unterbrink @hunterbr72
682 Followers 834 Following Researcher at Talos. No infosec drama, no opinions, no politics, Tech and Tools only. Author of Dyn. Data Resolver (Winner of Hex-Rays Plugin Contest 2020).
Digital_Monet @aRtAGGI
2K Followers 254 Following Binary and Art Recovery Specialist. aka "The White Glove"
Maddie Stone @maddiestone
62K Followers 800 Following Security Researcher. Previously Google Project Zero and TAG | 0days all day. Love all things bytes, assembly, and glitter. she/her.
Natalie Silvanovich @natashenka
45K Followers 2K Following Tamagotchi Hacker. Google Project Zero. She/her.
























