@euphoricfall

Cofounder @pulsedive cybersecurity #threatintel | watercolorist | hyperserious board gamer | still borrows books from the public library

 NYC
Joined August 2019
  • Tweets1.3K
  • Following1.3K
  • Followers995
225Media
It's happening. The 2024 CTI Networking Report is now live: bit.ly/cti-networking-2024
1
10
1
19
1,722
🤓 I was recently quoted in the latest @feedly blog by @euphoricfall on ASN hunting! Check it out, it is a great piece that covers some techniques that are often overlooked by threat intelligence analysts! 👇 feedly.com/ti-essentials/pos…
7
23
2,383
Exploitation attempts for #React2Shell (CVE-2025-55182) have been widespread over the last week. Three resources that outline exploitation are: greynoise.io/blog/cve-2025-5… esentire.com/security-adviso… huntress.com/blog/peerblight… Recommendation: Deploy patches as soon as possible

CVE-2025-55182 (React2Shell) Opportunistic Exploitation In The Wild: What The GreyNoise Observation...

GreyNoise is already seeing opportunistic, largely automated exploitation attempts consistent with the newly disclosed React Server Components (RSC) “Flight” protocol RCE—often referred to publicly...

greynoise.io
2
3
414
We analyzed the malicious code in the recent "second coming" of Shai-Hulud. blog.pulsedive.com/return-of…

Return of Shai-Hulud: The “Second Coming” of the NPM Supply Chain Compromise

This blog walks through the malicious code present in the second iteration of the Shai-Hulud compromise.

blog.pulsedive.com
3
5
245
We'll be back . See you soon.
2
4
269
A technical analysis reveals that the Kimsuky threat group utilizes a JavaScript dropper to exfiltrate data from compromised systems, utilizing network IOCs and establishing persistence via Windows scheduled tasks. #CyberSecurity #MalwareAnalysis blog.pulsedive.com/dissectin…

Dissecting the Infection Chain: Technical Analysis of the Kimsuky JavaScript Dropper

This blog analyzes a Kimsuky sample, how the dropper downloads additional stages, and network traffic observed within the infection chain.

blog.pulsedive.com
3
10
829
3 weeks.
2
2
338
Community Resource Share: @CuratedIntel's CTI Research Guide curatedintel.org/2024/10/the… Start with this guide if you're finding it difficult to consistently and appropriately perform intelligence collection for your stakeholders.
1
3
322
We released Pulsedive 6.3 this week to Pulsedive Community. This scanning infrastructure update benefits all users and customers with better data enrichment and performance. Details below
2
3
3
372
Oh, so you track ransomware tools? OK, name every one. Me:
8
128
5
685
82,424
I'm coming for you @BSidesNYC
#BSidesNYC@BSidesNYC14 Aug 2024
Sneak peek of the @BSidesNYC 0x04 badge. It's our first electronic badge, ever! See it in action: youtube.com/watch?v=nQN8bjaB… ⏩ Credits Photo: Hawkeye Design: @1dark0ne Build: @MakeAugusta
3
116
PSA from the @CuratedIntel Community to the CTI industry — watch out for cybercrime groups seeking access to your vendor platforms ⚠️
27
76
21,034
CrowdStrike BSOD Outage: What We Know blog.pulsedive.com/crowdstri…

Pulsedive Blog | CrowdStrike BSOD Outage: What We Know

What we know about the CrowdStrike BSOD outage.

blog.pulsedive.com
1
2
4
192
We're tracking the new DodgeBox (loader) & MoonWalk (backdoor) tools researched by the @Threatlabz team as related threat pages in our free Community Platform. DodgeBox: pulsedive.com/threat/DodgeBo… MoonWalk: pulsedive.com/threat/MoonWal… APT41: pulsedive.com/threat/APT41
1
3
5
300
New blog published, all about phishing kits: blog.pulsedive.com/phishing-… How do they work, what capabilities do they have, and most importantly - how can we better detect and protect against phishing kits?

Pulsedive Threat Research | Phishing Kits

Phishing kits are "as-a-service" tools that help threat actors rapidly deploy phishing pages and campaigns. This blog examines key components, how they work, helpful resources, and a dive into the...

blog.pulsedive.com
4
5
229
Final part of the CTI Networking Research series is now out. blog.pulsedive.com/sharing-c…

Sharing, Compared Part 4

Quantitative and qualitative insights inform our roadmap and best practices to achieve success in CTI networking.

blog.pulsedive.com
1
1
140
🔎What's going on with Latrodectus? blog.pulsedive.com/threat-re… Our latest research blog examines the distribution mechanisms, C2 traffic patterns, and key capabilities of Latrodectus loader.

Pulsedive Blog | Latrodectus Threat Research

This research examines the distribution mechanisms, C2 traffic patterns, and functionality of Latrodectus loader.

blog.pulsedive.com
3
3
262
Our browser add-on for Chrome, Firefox, and Edge has a new look, fresh features, and more controls with our V3 update. Free to use and enrich from our Pulsedive Community platform. blog.pulsedive.com/update-pu…

Pulsedive Update | Chrome, Firefox, Edge Add-On Update

Pulsedive's latest V3 update to our Chrome, Firefox, and Edge add-on include new features and improved user experience.

blog.pulsedive.com
1
3
3
216
New Threat Added: Asuka Stealer Find IOCs, TTPs, news and other highlights at: pulsedive.com/threat/Asuka%2…
1
3
277
Newly published: a beginner-friendly CyberChef 101 Guide blog.pulsedive.com/tool-guid… We cover how it works and how you can use it for security analysis - real-world examples and resources included.
9
9
693
🤯 The level of sophistication of the XZ attack is very impressive! I tried to make sense of the analysis in a single page (which was quite complicated)! I hope it helps to make sense of the information out there. Please treat the information "as is" while the analysis progresses! 🧐 #infosec #xz
95
3,046
246
12,217
1,107,403
Load more