@BaskarGreen

ɹǝǝuıƃuǝ ǝsɹǝʌǝɹ

 Bengaluru South, India
Joined January 2017
  • Tweets35
  • Following1.5K
  • Followers126
6Media
Baskar M retweeted
Cyderes@CyderesSep 15
New #HowlerCell Threat Research Two threat actors, one job-offer lure, same result: full remote access after one click. One ties to a Vietnam-nexus cluster; the other's custom, unattributed tooling. Full breakdown + IOCs: cyderes.com/howler-cell/job-…

Inside Two Multi-Stage Attack Chains Hiding Behind Job Offers

Explore the intricate multi-stage attack chains disguised as job offers, revealing advanced tactics used by cybercriminals to exploit job seekers.

cyderes.com
2
1
526
🚨 DDoS Alert: 🇳🇱 BD Anonymous claims to have targeted the website of Municipality of Dalfsen (dalfsen.nl).
1
4
2,624
🚨 New GoSerpent malware has targeted government and diplomatic entities across Southeast Asia since late 2025. It gives attackers long-term access, steals credentials, collects sensitive files, and routes traffic through compromised hosts. Inside the campaign: thehackernews.com/2026/07/ne…
1
13
34
21,776
Baskar M retweeted
Cyderes@CyderesJul 16
🚨 New Microsoft zero-day tied to #MSNightmare: LegacyHive 🚨 Howler Cell reproduced the technique on Windows 11 and in a controlled environment. #LegacyHive is the ninth tool released by this researcher. Read more by @reegun21 & @BaskarGreen: bit.ly/4vSLcFz

Windows User Profile Service Arbitrary Hive Loading Vulnerability

Howler Cell analyzes LegacyHive, a Windows profile loading vulnerability that exposes another user's registry hive. No CVE, advisory, or patch exists.

cyderes.com
2
3
292
Baskar M retweeted
Reegun J@reegun21Jul 16
#LegacyHive: Another Windows zero-day leaked by the researcher. We at @Cyderes #HowlerCell investigated and validated it, and we're sharing the full report. Read here: cyderes.com/howler-cell/lega… #threathunting #threatintel #dfir #RE #0day

Windows User Profile Service Arbitrary Hive Loading Vulnerability

Howler Cell analyzes LegacyHive, a Windows profile loading vulnerability that exposes another user's registry hive. No CVE, advisory, or patch exists.

cyderes.com
1
3
189
Baskar M retweeted
Cyderes@CyderesJul 15
What looked like a Bangladesh Air Force officer bio was actually a multi-stage implant. Howler Cell tracks an active DoNot intrusion targeting Bangladesh’s military. Read more by @reegun21, @BaskarGreen, & Rahul R: bit.ly/4fiWvAk #HowlerCell
3
1
4
384
Update: The fake Indian Income Tax campaign now looks broader. Cyderes found the same attack chain pushing two RATs at once: a Gh0st RAT derivative and an AsyncRAT-family implant. Two C2 channels. Backup access if one gets blocked. Read: thehackernews.com/2026/07/su…
15
48
20,177
New ‘BlackSanta’ EDR killer spotted targeting HR departments bleepingcomputer.com/news/se… bleepingcomputer.com/news/se…

New ‘BlackSanta’ EDR killer spotted targeting HR departments

For more than a year, a Russian-speaking threat actor targeted human resource (HR) departments with malware that delivers a new EDR killer named BlackSanta.

bleepingcomputer.com
2
34
5
114
11,289
Baskar M retweeted
reecDeep@reecdeep21 Jan 2022
🔥#Gozi #ISFB #Ursnif #malspam campaing target #italy 🇮🇹 using @VodafoneIT as lure ZIP (pw protected) > VBE > regsvr32 1⃣script downloader: medialines.[bar mediasecure.[bar securelinks.[bar 2⃣downloader 2nd stage: intermedia.]bar nnnnnn.]bar nnnnnn.]casa #infosec #cybersecurity
7
1
17
Baskar M retweeted
Europol
@Europol27 Jan 2021
Bye-bye botnets👋 Huge global operation brings down the world's most dangerous malware. Investigators have taken control of the Emotet botnet, the most resilient malware in the wild. Get the full story: europol.europa.eu/newsroom/n…
54
1,276
260
2,431
#bazar #Emotet #Malware 🧐
2
2
8
Malwoverview 4.0 is available and includes many options for Alien Vault(@attcyber ), @malpedia, @PolySwarm and ThreatCrowd, joining to existing URLHaus @abuse_ch, @mal_share, @virustotal and @HybridAnalysis options. Malwoverview: github.com/alexandreborges/m… #malware #ThreatHunting
2
136
5
294
#opendir : cfwc-deanzadistrict.org/acco… #Gozi
1
5
#Ursnif 🧐 Using WMI to gather all information in antispwareproduct on the system. Select * From AntiSpywareProduct xroot\securitycenter2
5
Sodinokibi Ransomware contain 1076 domains 🧐 #Ransomware #Sodinokibi virustotal.com/gui/file/6ff9…
2
6
1
24
#Ransomware🧐 #leto #STOP #Djvu SHAs🧐 virustotal.com/gui/file/05be… virustotal.com/gui/file/114c… virustotal.com/gui/file/5caf… virustotal.com/gui/file/5caf…
2
4
#ursnif #Malware 🧐
4
Release of GandCrab 5.2 Decryptor Ends a Bad Ransomware Story - by @LawrenceAbrams bleepingcomputer.com/news/se…

Release of GandCrab 5.2 Decryptor Ends a Bad Ransomware Story

In collaboration with law enforcement agencies around the world, Bitdefender has released an updated decryptor for the GandCrab Ransomware that can decrypt files encrypted by versions 1, 4, and 5...

bleepingcomputer.com
38
2
46
TOP10 last week's threats by uploads to ANYRUN! ⬇️ #Emotet 400 (489) ⬆️ #NanoCore 164 (137) ⬆️ #Lokibot 127 (109) ⬆️ #HawkEye 95 (80) ⬆️ #Azorult 92 (69) ⬇️ #Ursnif 78 (85) ⬆️ #AgentTesla 75 (51) ⬆️ #Formbook 67 (56) ⬆️ #Pony 57 (21) ⬆️ #njRAT 50 (20) 👉 app.any.run/submissions

Free Malware Reports - ANY.RUN

Use our malware sample database to research and download files, hashes, IOC ets.

app.any.run
26
23
Baskar M retweeted
Netskope@Netskope23 Apr 2019
Netskope #ThreatResearch Labs discovers threat actor using Google Sites to deliver #malware bit.ly/2IRobi4
2
1
3
Load more