Twitter | Search | |
Marcus
Labeling everything APT10
291
Tweets
140
Following
84
Followers
Tweets
Marcus retweeted
Eyal Sela Jun 26
My gut feeling is that Recorded Future made a wrong pivot and fell into a rabbit hole of unrelated infrastructure (i.e. not ). The use of commodity RATs not known to be used by the group and abnormally high number of C2 domains supports this claim
Reply Retweet Like
Marcus Jun 26
Replying to @eyalsela
Reply Retweet Like
Marcus Jun 26
hide yo APT groups before see them and barfs all over them
Reply Retweet Like
Marcus Jun 24
patchwork and badnews backdoor
Reply Retweet Like
Marcus Jun 4
Replying to @TalosSecurity
hmmm i thought you said b2600ac9b83e5bb5f3d128dbb337ab1efcdc6ce404adb6678b062e95dbf10c93 was muddy.......
Reply Retweet Like
Marcus Jun 3
Replying to @silascutler @jfslowik
also seeing hdfilm-seyret[.]com
Reply Retweet Like
Marcus May 28
whats your method for decoding powershell so cleanly in your recent samples? Thx
Reply Retweet Like
Marcus May 20
Replying to @tlansec
if muddywater is a good enough name for the actor, then it should be good enough name for the infosec folks without having to create more noise
Reply Retweet Like
Marcus Apr 18
Reply Retweet Like
Marcus Apr 8
Replying to @DrunkBinary
APT Putty Panda?
Reply Retweet Like
Marcus Apr 3
Email subscriptions offline?
Reply Retweet Like
Marcus Apr 1
Replying to @_CPResearch_
gladiyator[.]tk
Reply Retweet Like
Marcus Mar 29
The lightning strike and fire today
Reply Retweet Like
Marcus Mar 29
Replying to @KTULNews
Reply Retweet Like
Marcus Mar 29
Replying to @amyjenson3 @KTULNews
Reply Retweet Like
Marcus Mar 28
Restocking supplements via
Reply Retweet Like
Marcus Mar 27
Major props and 10/10 rating for . My pops arrived today. Packaging was double boxed with bubble wrap. I did received a duplicate but they fixed the issue in seriously under a hour! Amazing service. Will buy again!!
Reply Retweet Like
Marcus Mar 18
Replying to @POPnBeards
thx. Does this include the DBZ 6 pack bundle?
Reply Retweet Like
Marcus Mar 12
@FunkoHotTopic will you be monitoring Porunga?
Reply Retweet Like
Marcus Mar 1
Replying to @FunkoGS
tease
Reply Retweet Like