Alfred Alvarado @_Fritto_

Threat Researcher @Trellix - My tweets are my own Dallas, TX Joined November 2008

Tweets

89
Followers

95
Following

385
Likes

70

Alfred Alvarado @_Fritto_

3 years ago

@vxunderground After Tuesday, even the calendar says WTF

0 0 0 41 0

View Details

Alfred Alvarado @_Fritto_

3 years ago

@RHHSHawks Does anyone have an extra ticket to tomorrow nights football game. Looking for 1or 2 tickets on Heath side.

5 0 0 52 0

View Details

Trellix Advanced Research Center @TrellixARC

3 years ago

ICYMI: On August 29, 2023, an FBI-led effort dismantled the Qakbot malware and botnet. Learn about the upward attack trend preceding the takedown from Daksh Kapur, @_Fritto_, and Nico Yturriaga. bit.ly/3R8uZeo

0 3 3 652 0

View Details

Trellix @Trellix

3 years ago

Law enforcement led a successful campaign to disrupt and dismantle Qakbot on August 29, 2023. @TrellixARC’s Daksh Kapur, @_Fritto_, and Nico Yturriaga share everything you need to know to understand the malware and botnet. Qakbot: bit.ly/3R8uZeo

0 3 5 1K 0

View Details

Alfred Alvarado @_Fritto_

3 years ago

@notshenetworks That’s crazy, that’s not to far from me !!

0 0 0 49 0

View Details

Alfred Alvarado @_Fritto_

3 years ago

@cybersecmeg Have fun at Summer Camp.... maybe next year for me..

0 0 0 86 0

View Details

The Information Security Collective | 501(c)3 @InfoSecTogether

3 years ago

🚨 Giveaway 🚨 Do we need a reason to hold a giveaway? We want to give away two @TCMSecurity vouchers! (1) Practical Web Application Penetration Testing AND (1) Practical Ethical Hacking All you have to do to enter is: 1️⃣ Retweet this Tweet 2️⃣ Make sure you’re following us Winner announced tomorrow at 5:00 PM

39 187 144 28K 8

View Details

Alfred Alvarado @_Fritto_

3 years ago

T-2: n00b pin acquired, presenting room found, n00b pin already lost 😞

0 3 6 341 0

View Details

Trellix @Trellix

3 years ago

Explore securing the software supply chain with VP Customer Advocacy, @TrellixARC Karine Ben-Simhon at the Moscone South 207 #RSAC Sandbox Stage. The panel will cover: 🛡️ Threat intelligence 📈 Recent trends 🧰 Mitigation strategies Join her: bit.ly/3KjUlRA

1 4 3 2K 0

View Details

Trellix @Trellix

3 years ago

Want to mitigate the risk of being targeted w/ LOLBins? During their #RSAC session (located in Moscone South - 153), @TrellixARC researchers @tim_hux & @_Fritto_ discuss applicable threat hunting strategies & map MITRE techniques to real world examples. bit.ly/3KjUlRA

0 1 0 2K 0

View Details

Trellix @Trellix

3 years ago

Avoid being a future victim of weaponized LOLBins — join @TrellixARC security researchers @tim_hux and @_Fritto_ at #RSAC to equip yourself with relevant threat hunting tools & techniques. bit.ly/3nEd02F

0 2 2 2K 0

View Details

Alfred Alvarado @_Fritto_

3 years ago

In an additional report today, the @Trellix Threat Intelligence Group talks CVE-2021-21974, providing data on telemetry gathered by our sensors & share information about activity targeting this 2yr old vuln that some have left unpatched. trellix.com/en-us/about/ne…

0 0 4 181 0

View Details

Alfred Alvarado @_Fritto_

3 years ago

The latest @Trellix report covers CVE-2023-0286, researchers Mark Bereza(@ROPsicle) & John Dunlap discuss the vulnerability as well as the litany of prerequisites & mitigating factors that limit its usefulness to attackers. trellix.com/en-us/about/ne…

0 3 1 251 0

View Details

Alfred Alvarado @_Fritto_

3 years ago

VMWare identified older and outdated products that have reached end of general support are those targeted in ESXiArgs Ransomware attacks. VMWare recommends upgrading to the latest supported version and disabling the OpenSLP service in ESXi. blogs.vmware.com/security/2023/…

0 0 0 73 0

View Details

vx-underground @vxunderground

3 years ago

Lockbit ransomware group has informed us they have acquired a 3rd ransomware variant. - Lockbit Red - Lockbit Black - Lockbit Green They also have modified their ESXI ransomware variant. Yes, they actually wrote "TLP:RED" in the image.

29 100 450 126K 31

View Details

vx-underground @vxunderground

3 years ago

HIVE ransomware group's Tor domain has been seized by EUROPOL *No official announcement yet from United States Department of Justice or EUROPOL

21 149 678 132K 34

View Details

Germán Fernández @1ZRR4H

3 years ago

1/ DEV-0569, current distribution via #GoogleAds. 1.- #Gozi aka #Ursnif (bot) ↓ 2.- #RedLine (stealer) ↓ And if the conditions are right, possibly: 3.- #CobaltStrike (C2) ↓ 4.- #Royal Ransomware 💥 (No more BatLoader in the infection chain)

4 97 255 60K 57

View Details

Germán Fernández @1ZRR4H

4 years ago

🚨 Ongoing mass exploitation of CVE-2022-44877 (Centos Web Panel 7 Unauthenticated Remote Code Execution). Source: 206.189.170.136 🇺🇸 Malicious Base64 payload is a reverse shell that connects to 206.189.170.136:9181 The scanning of CWP instances started around January 06th.