The Orange CERT is managing IT security incidents that might affect the activities of the Orange Group, including its various business units and subsidiaries.
France
Joined April 2016
- Tweets333
- Following131
- Followers1.1K
- Likes17
Great work from Orange experts on this case. Thanks Hugo 🙏
Hugo Rifflet from @orangecyberdef now on stage for #BotConf 2024 in Nice, on the persistent financially-motivated adversary #OPERA1ER. What a great line-up this week @Botconf!
👉botconf.eu/schedule/
Orange-CERT-CC retweeted
At BotConf in Nice, together with @orangecyberdef, we're diving deep into the operations of the infamous French-speaking threat actor OPERA1ER (NXSMS), who've stolen over $11 million since 2019 across 30 targeted #cyberattacks. Join us at BotConf eu1.hubs.ly/H08K0_80
Orange-CERT-CC retweeted
🤝 Group-IB has assisted in the INTERPOL-led Operation Nervone, aimed at successfully disrupting the operations of the cybercriminal syndicate #OPERA1ER in French-speaking Africa. More details: bit.ly/3NHlU9j
@INTERPOL_HQ @INTERPOL_Cyber
INTERPOL - Suspected key figure of notorious cybercrime group arrested in joint operation
interpol.int/News-and-Events…
Orange-CERT-CC retweeted
The 18 sheets are available in English and French. All existing IRMs including #ransomware or #phishing have been updated and several new ones have been created such as IRM-18 for Large Scale Compromise.
Orange-CERT-CC retweeted
We are happy to announce the publication of the new version of the IRMs (Incident Response Methodologies) resulting from the work of @CertSG with the collaboration of CERT @advens. Feel free to use it! github.com/certsocietegenera…
#IncidentResponse #CyberSecurity #DFIR
En collaboration avec @OrangeCertCC, Group-IB a publié le rapport #threatreport "#OPERA1ER. Ceux qui jouent à Dieu sans y avoir été autorisés". Le rapport se penche sur les modes opératoires de cet acteur de la menace francophone. Téléchargement➡️group-ib.com/resources/resea…
Thanks to all teams involved in this investigation 👍 credits in the report.
In collaboration with the researchers from @OrangeCertCC, Group-IB is releasing a new #threatreport "#OPERA1ER. Playing God without permission". The report takes a deep dive into financially motivated attacks of the French-speaking threat actor. Download➡️bit.ly/3FKbS4H
Orange-CERT-CC retweeted
#OPERA1ER has been seen targeting companies across in 15 countries: Ivory Coast, Mali, Burkina Faso, Benin, Cameroon, Bangladesh, Gabon, Niger, Nigeria, Paraguay, Senegal, Sierra Leone, Uganda, Togo, Argentina:
bit.ly/3FKbS4H
Orange-CERT-CC retweeted
Threat actors are constantly developing new TTPs and in August 2022, with the help of Przemyslaw Skowron, Group-IB identified some new servers used by #OPERA1ER. The latest IOCs and OPERA1ER’s targets can be found in this blog post:
bit.ly/3h6EKKn
Great initiative for those looking for Security Advisories / Bulletins linked to Log4Shell (CVE-2021-44228)
🛡️BlueTeam CheatSheet * #Log4Shell CVE-2021-44228* | Last updated: 2021-12-11 0040 UTC
↘️
gist.github.com/SwitHak/b66d…
Vous êtes expert.e en cyber sécurité et motivé.e pour nous rejoindre ? orange.jobs/jobs/offer.do?jo…
Congratulations to @CERT_OPL for their brilliant report !
For all of our English-spoken followers (albo dla Waszych anglojęzycznych szefów :) ) - english version of CERT @Orange_Polska Report 2019. Enjoy!
cert.orange.pl/pobierz-rapor…
We are back after a short break. Thanks to @LinaBtura and @clodescoms from @TwitterFrance for their support 👍
#COVID19 - we can count on our network and teams working on the front line to ensure continuity of service. orange.com/en/news/2020/Marc…
Orange-CERT-CC retweeted
As promised, amcache analysis v2 is out, you can find it here: ssi.gouv.fr/en/publication/a…
Thread for what's new:
#DFIR #DFIRSummit
Jeune expert(e) en cyber sécurité motivé(e) pour nous rejoindre ? Nous contacter par DM. L’équipe Orange-CERT-CC.
Orange-CERT-CC retweeted
#OpenCTI – La nouvelle plateforme de l’ANSSI, co-développée avec le @CERTEU, pour structurer, traiter et partager les connaissances en matière d’analyse de la menace #CTI
L’outil est à votre disposition en #Opensource dès maintenant !
🆕ssi.gouv.fr/actualite/openct…
Orange-CERT-CC retweeted
Une nouvelle vulnérabilité #0day découverte dans l'authentification NLA (Network Level Authentication) de Microsoft Windows RDP permet à un attaquant de contourner l'écran de verrouillage sur des sessions distantes.
kb.cert.org/vuls/id/576688/