Lucas Aiden @NetDefender01

Liberia Joined August 2013

Tweets

361
Followers

248
Following

2K
Likes

531

Cybersecurity and Infrastructure Security Agency @CISAgov

4 weeks ago

Big things are coming to Los Angeles! Acting Director Nick Andersen recently met with @LA28 leaders to talk safety, security, & cyber readiness for the 2028 Games. From FIFA to Super Bowl LXI to the Olympics, we’re keeping LA secure!🛡️

8 28 64 8K 10

View Details

Lucas Aiden @NetDefender01

a month ago

But the GDID data exists on every Windows machine, including yours. The infrastructure that handed his entire digital life to the FBI is the same infrastructure running on your laptop right now. #Cybersecurity #fbi

0 0 0 8 0

View Details

Lucas Aiden @NetDefender01

a month ago

Tallinn, New York, Thailand, Germany. Different IPs. Same machine. Same person. Microsoft had already identified him in October 2024 and filed a criminal referral. He was still 17. So they waited till He turned 18. Then they moved. Yes, Stokes is accused of serious crimes.

1 0 0 9 0

View Details

Lucas Aiden @NetDefender01

a month ago

19-year-old hacker used VPNs, tunneling tools, and rotated IPs across 3 countries. The FBI still caught him. Here's the Windows feature that made it possible and why it should concern everyone.

1 0 0 24 0

View Details

Lucas Aiden @NetDefender01

a month ago

Noted

OccupytheWeb @three_cube

a month ago

When all is said and done, ARM will be powering the vast majority of AI. hackers-arise.com/the-future-of-…

1 2 9 2K 0

0 0 0 10 0

View Details

Cybersecurity and Infrastructure Security Agency @CISAgov

a month ago

🔍 July’s President’s Cup #GameOfTheMonth: "The Triple Lindy” (PC6, R1)! This challenge has the participant navigate a compromised ship, break into restricted services, and recover mission-critical data. Play now: presidentscup.cisa.gov/game-of-the-mo… #PresCup

3 12 33 6K 4

View Details

Cybersecurity and Infrastructure Security Agency @CISAgov

a month ago

Our most important mission is to protect the American people. As the nation comes together for large-scale events this summer, like #FIFAWorldCup & Freedom250, we’re here to help everyone stay safe. Get started with our tips & resources: cisa.gov/staying-secure… @WHTaskForceFIFA

1 7 20 6K 4

View Details

Cybersecurity and Infrastructure Security Agency @CISAgov

2 months ago

If you notice behavior that seems odd such as someone avoiding security checks, acting nervous, or taking photos of entrances and exits—report it. Remember people aren’t suspicious but their behavior can be. Your awareness can make a difference: go.dhs.gov/5qz

2 15 34 6K 4

View Details

Casey @CaseyFaitel

2 months ago

1989 Cadillac Solitaire Concept V12 Drive By Engine Sound EyesOn Design Car Show 2026

85 356 3K 343K 626

View Details

Cybersecurity and Infrastructure Security Agency @CISAgov

2 months ago

Check out our most recent guidance in the Journey to Zero Trust series on how the Trusted Internet Connections (TIC) 3.0 initiative is helping to modernize agencies & securely connect users to applications across cloud & distributed environments. 🔗 go.dhs.gov/5xe

4 12 33 6K 11

View Details

The Cyber Security Hub™ @TheCyberSecHub

2 months ago

Amadey, StealC malware operations disrupted in Operation Endgame action bleepingcomputer.com/news/security/… #Security

0 1 0 1K 1

View Details

VeritasLab @Syp_137

2 months ago

$47M in criminal crypto assets restricted — those wallets had a history before this operation. Infrastructure takedowns are the end of the chain. The behavioral trail starts much earlier.

The Hacker News @TheHackersNews

2 months ago

🛑 Cybercrime crews just lost part of their malware supply chain. Operation Endgame disrupted infrastructure behind Amadey and StealC — malware used to steal data and deliver additional payloads. Authorities say the operation led to: - 326 servers dismantled - 142 domains

2 38 105 22K 28

0 1 1 8 0

View Details

DFIR Radar @DFIR_Radar

2 months ago

Microsoft and Europol disrupt 200+ StealC and Amadey C2 domains on June 24, 2026, exposing the full MaaS infostealer pipeline from credential theft to ransomware deployment. Key findings: - StealC (C++) defeats Chromium App-Bound Encryption via APC injection into a suspended process, writing decrypted credentials to C:\ProgramData\<HWID>.txt before exfil. It also raids Outlook profiles under HKCU\Software\Microsoft\Office\<version>\Outlook\Profiles, WinSCP sessions from HKCU\Software\Martin Prikryl\WinSCP 2\Sessions, and Steam files including ssfn* and loginusers.vdf. All data is RC4-encrypted and Base64-encoded before POST to C2. Self-delete fires last if the flag is set. - Amadey (active since 2018) persists as nudwee.exe under C:\Users\<user>\e079729711 via scheduled task, communicates over HTTP with RC4+hex encoding, and supports 20+ backdoor commands including enabling RDP (fDenyTSConnections=0), creating hidden admin accounts, and loading cred.dll and clip.dll plugins at runtime. - IOCs from the report: StealC C2 at hxxp://polse[.]us/62ea47cac2534aa18f74.php and hxxp://bluescry[.]com/01f96fd710e905ca2326.php; Amadey C2 at hxxp://microsoft-telemetry[.]at/cvdfnaFJBmC0/index.php. Full hash and URL list in the Microsoft Security blog. Hunt for nudwee.exe, scheduled tasks pointing to the e079729711 directory, rundll32 loading cred.dll or clip.dll, and outbound HTTP POST to .php endpoints with RC4+Base64 bodies. #DFIR_Radar

1 4 1 427 0

View Details

Autumn Good @autumn_good_35

2 months ago

『On first glance at Figure 6, we clearly see that, indeed, there is no shared infrastructure, but rather several smaller sub-botnets with one clearly dominating.』🧐 ESET takes part in Operation Endgame to disrupt Amadey and Stealc welivesecurity.com/en/eset-resear…

1 1 0 83 0

View Details

The Cyber Security Hub™ @TheCyberSecHub

2 months ago

Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered thehackernews.com/2026/06/amadey…

0 3 6 1K 1

View Details

ThreatCluster @threatcluster

2 months ago

Operation Endgame disrupted 66 domains and 296 servers linked to StealC and Amadey malware families on June 24, 2026. This coordinated effort involved Microsoft and law enforcement agencies across several countries.