Ebubekir @hackerbecker

Malware Analyst @PRODAFT - @_aucc, Karidesler CTF player @[email protected] Turkey Joined March 2012

Tweets

189
Followers

258
Following

3K
Likes

2K

@

8 months ago

TR //

0 21 138 42K 41

View Details

🐌 Subtle Snail (UNC1549), an Iran-nexus espionage group 🇮🇷, is targeting European 🇪🇺 telecom, aerospace, and defense organizations. The group uses LinkedIn HR lures and Azure-based C2. Read the full report 👉 catalyst.prodaft.com/public/report/… #ThreatIntel #Malware #APT #IOC

3 14 53 38K 33

View Details

AUCC @_aucc

a year ago

Merhaba! Teknolojinin baş döndürücü hızla geliştiği günümüzde, siber güvenlik hepimizin gündeminde en üst sıralarda yer alıyor. 🤩 İşte tam bu yüzden, seni Siber Güvenlik Zirvesi 2025’e davet ediyoruz! 🚀 Bu etkinlikte: 💻 Alanında uzman konuşmacılardan en yeni siber tehdit trendlerini öğrenebilir, 🔒 Veri koruması ve güvenlik teknolojileri üzerine son gelişmeleri ilk ağızdan duyabilir, 🎯 Siber güvenlik alanında kariyer fırsatlarını keşfedebilir, 🤝 Deneyimli profesyonellerle tanışarak yeni bağlantılar kurabilirsin! Gelin, hem öğrenelim hem de birlikte eğlenceli ve verimli bir gün geçirelim. ✨ Etkinlik ÜCRETSİZ ve herkesin katılımına açık! 🤗 Kaydını yaptırmak ve daha fazla bilgi almak için hemen QR kodunu tarayabilir veya aşağıdaki formdan başvurabilirsin: docs.google.com/forms/d/e/1FAI… 22 Mart 2025 | 09.30 - 17.00 Ankara Üniversitesi, Dil ve Tarih-Coğrafya Fakültesi, Farabi Salonu

1 5 6 445 1

View Details

Pskdby @Yldzdby

2 years ago

Diferansiyel denklemler dersi almış mühendis bir tanıdığınız varsa , hayat boyu bu dersin anılarını dinleyeceksinizdir. Not: askerlik anılarıyla yarışır . xdxdxd

0 1 5 450 0

View Details

meto @meto0x3d

2 years ago

My first blog post, "Understanding the Process Environment Block (PEB) for Malware Analysis," is out! I've explained key PEB techniques and demonstrated them with examples from #StealC and #BlackMatter ransomware. metehan-bulut.medium.com/understanding-… #malware #ReverseEngineering #infosec

4 43 141 12K 91

View Details

PRODAFT @PRODAFT

2 years ago

Since LOCKBIT’s first entry into the cybercrime ecosystem, we at PRODAFT have been assisting NCA, FBI and other partners of #OpCronos to better comprehend and disrupt this large criminal enterprise. Researching this ill-famous cybercrime syndicate has been challenging, but our investigations led us to identify over 28 affiliates and uncover all decryption keys for their ongoing campaigns. The research enabled us to gain in-depth visibility into each affiliate’s structures, including ties with other notorious groups such as FIN7, Wizard Spider, and EvilCorp. We diligently shared our findings with authorized law enforcement agencies to ensure meticulous deconfliction. Our key findings provided an essential contribution to: - Mapping out unique TTPs of LOCKBIT affiliates - Obtaining visibility on the affiliate infrastructures - Obtaining source code and other -sort-of keys - Monitoring of initial access brokers - Notifying and warning all affected parties in advance Our investigation of LOCKBIT presents a significant milestone. Thanks to this extensive research and collaboration with law enforcement agencies, we have contributed to continuous protection of our clients and to the timely notification of critical national infrastructures at risk across the globe. Shortly, we say "Thank u, next" @Europol @NCA_UK @FBI @KapoZuerich

5 45 209 325K 26

View Details

𝚎𝚌𝚑𝚎𝚕𝚘𝚗 @echel0n_1881

3 years ago

a writeup for mobilehackinglab.com's "Damn Exploitable Android App" challenge. devilinside.me/blogs/android-…

0 17 85 7K 23

View Details

batcain @batcain_

3 years ago

Here, IDAPython script to count how many times a function has been called. High call count usually points to decryption functions in obfuscated malware. github.com/batcain/idapyt…

1 34 149 10K 32

View Details

PRODAFT @PRODAFT

3 years ago

🚀 We keep adding more fuel to our growing Spotify channel! 🎵 🤭 Each of our teams has a unique music taste (to say at least) - something you can definitely see reflected in the diverse range of playlists we have curated for y’all. Let’s see... 👀 🤺 Lively songs that make us fight cybercrime fiercely, or rather calmer melodies that allow us to develop better solutions? 🧘‍♀️ Or maybe just some random tunes that perfectly embody the versatility of our teams? Yep, we have it all, and some more to come! 🔥 Go ahead and check out our latest playlist additions – they're guaranteed to leave you amused & prone to dance excessively… or rather perplexed & bewildered, guess we can’t promise anything 💁‍♀️ 🎢 You can jump on our musical rollercoaster here: open.spotify.com/user/31ofdm33g… Put the volume to the max and enjoy! 🎶 #teamtunes #withmusicagainstcybercrime #threatintelligence #withatwist

0 8 19 3K 3

View Details

PRODAFT @PRODAFT

3 years ago

Why pay the ransom if you can decrypt your files? 🤔 💸 🕵️‍♂️ Last month, the PTI team noticed an emergence of a new ransomware dubbed PlutoCrypt. PlutoCrypt is a customized version of an ill-known malware #CryptoJoker. 🃏 It has been observed that the ransomware is targeting banks & individuals in the MEA region by spreading #phishing emails and further requesting ransom payments in #Bitcoin. 🫠 🦾 However, our team did not hesitate and after some reverse engineering of the #malware, we found a weakness in the encryption algorithm, leading us to the development of a #decryptor executable: the PlutoCrypt Ransomware Decryptor. 😎 How does it work, how can you build and run the decryptor? Find all the answers we got ready for you on GitHub: 👉 github.com/prodaft/malwar… #plutocrypt #ransomware #decryptor #github #threatintelligence #cybersecurity

0 11 21 3K 1

View Details

huntr Hacktivity @huntrHacktivity

3 years ago

radareorg/radare2 disclosed a bug reported by @echel0n_1881 (CVE-2023-1605) - Patch: github.com/radareorg/rada… huntr.dev/bounties/9dddc… #hunter #infosec #opensource

0 8 14 3K 1

View Details

ege @egeblc

3 years ago

We created our own socket relay 🎉🎊 github.com/qsocket/qsocket

5 16 59 13K 15

View Details

Veli Tekin @vvelitkn

3 years ago

My latest project, Evasion Escaper! It's a powerful tool that bypasses checks made by the malware to detect if it's running in a sandbox. It includes innovative techniques for DLL tracking and new bypass methods. Check it out and share your feedback! vvelitkn.com/malware%20anal…

2 47 109 10K 37

View Details

batcain @batcain_

3 years ago

Keyword exclude ekledim, keyword listesini deprem ile alakalı kelimelerle güncelledim. Kullanmak isteyen olursa buraya bırakıyorum. github.com/batcain/phishi… Şimdiye kadar bulduğum ve daha sonra bulacağım alan adlarını da aşağıdaki repoya ekliyor olacağım. github.com/batcain/olta

batcain @batcain_

3 years ago

@helloburaste @gkhck_ Merhaba, ben x0rz'a ait phishing catcher aracını kullanıyorum. Araç domainlere yeni alınmış sertifika streamini vereceğiniz keywordlere ve tldlere göre filtreliyor. Ancak, exclude mekanizması bulunmuyor. Dolayısıyla epey noise yaratıyor ve manuel kontrol gerektiriyor.

1 0 2 844 1

0 2 11 716 0

View Details

batcain @batcain_

4 years ago

Currently looking for remote mid malware analyst/hunter job alongside reverse engineering, just so you know. End of transmission.

0 10 20 7K 1

View Details

Ebubekir @hackerbecker

4 years ago

One of the best malware analyst and reverse engineer I know

batcain @batcain_

4 years ago

Currently looking for remote mid malware analyst/hunter job alongside reverse engineering, just so you know. End of transmission.

0 10 20 7K 1

0 0 4 465 0

View Details

herrcore @herrcore

4 years ago

Today’s #OALABS AMA… Malware Analysis Tips and Tricks 🧨 — One Trick To Level Up Your Reverse Engineering youtu.be/EjVVbM6ub00 — How To Identify Unknown Crypto Functions youtu.be/BGIDMpSztSk — .NET Static Config Extractor Tips youtu.be/n435uL01T_E —

1 25 69 6K 23

View Details

AUCC @_aucc

4 years ago

📢📢 2022-2023 dönemi için tanışma toplantımızı gerçekleştirdik 🎉🎊 Güncel sunuma buradan erişebilirsiniz: raw.githubusercontent.com/AUCyberClub/sl…

0 3 7 0 0

View Details

ty @_theatha

4 years ago

Hello guys! I created a helper #YARA module that gets the data at the given offset and size. Kudos to @_n1ghtw0lf for inspiring awesome blog post! Here is my blog post: devilinside.me/blogs/configur… You can find used samples and example usages in this repository:github.com/theatha/YARA_f…

8 61 191 0 21

View Details

Tersine Mühendisler Odası @TTMO

4 years ago

. @tmpout'ın volume 1'inden tam 5 yazıyı Türkçe'ye tercüme eden @echel0n_1881 ve @batcain_, devamının da yolda olduğunu söyledi. Şuradan derginizi edinebilirsiniz: - tmpout.sh/1/tr/