//
sign in
Profile
by @danabra.mov
Profile
by @dansshadow.bsky.social
Profile
by @jimpick.com
AviHandle
by @danabra.mov
AviHandle
by @dansshadow.bsky.social
AviHandle
by @katherine.computer
EventsList
by @katherine.computer
ProfileHeader
by @dansshadow.bsky.social
ProfileHeader
by @danabra.mov
ProfileMedia
by @danabra.mov
ProfilePlays
by @danabra.mov
ProfilePosts
by @danabra.mov
ProfilePosts
by @dansshadow.bsky.social
ProfileReplies
by @danabra.mov
Record
by @atsui.org
Skircle
by @danabra.mov
StreamPlacePlaylist
by @katherine.computer
+ new component
Profile
Loading...
1985 Oslo-born computer security expert with a passion for incident handling, cloud security, and security operations. Senior Security Analyst at Defendable, member of Norwegian Unix User Group, and Hackeriet hackerspace in Oslo. (He/Him) #cybersecurity
Hans-Petter Fjeld
Excited to dive into the latest @thedfirreport.bsky.social! ๐ŸŽ‰ 'The Curious Case of an Egg-cellent Resume' is packed with detailed insights and a goldmine for #ThreatHunting. ๐Ÿ•ต๏ธโ€โ™‚๏ธ Perfect way to start the week! ๐Ÿš€ Check it out: thedfirreport.com/2024/12/02/t... #infosec
Dec 4, 2024
Key Takeaways Initial access was via a resume lure as part of a TA4557/FIN6 campaign. The threat actor abused LOLbins like ie4uinit.exe and msxsl.exe to run the more_eggs malware. Cobalt Strike andโ€ฆ
The Curious Case of an Egg-Cellent Resume
thedfirreport.com
Hans-Petter Fjeld