Qatar giving the Mossad a run for their money with the espionage

Qatar bugged Swiss Attorney General and FIFA President Infantino

An intelligence operation commissioned by Qatar targeted an informal meeting between Swiss Attorney General Michael Lauber and FIFA President Gianni Infantino. Operatives on behalf of Qatar were already planning to recruit the Attorney General for their cause at the end of 2011.

-

This is a fun one!

An NSO employee, an automation dev, stole the Pegasus source code from work. To do this he googled, “how to remove McAfee Data Protection?” Whatever the instructions were, they worked. So de-McAfee’s his work machine and copies the source code.

Trawling through the code he extracts three iOS 0days. He then contacts <some buyer> (maybe Zerodium?) and says: “I am hacking team member with access to NSO code. I sell you for €50 million. Is 3 iOS 0day. Ok?”

The buyer contacts NSO to tell them that someone claiming to be a hacker is selling their proprietary source code. NSO does an internal investigation and find there’s one guy who disabled his McAfee Data Protection software.

Jail door slamming sound effect.

-

Maxime Chevalier

@Love2Code

Memory, Pages, mmap, and Linear Address Spaces

Memory, Pages, mmap, and Linear Address Spaces

We don’t always think of it this way, but on modern machines, memory and pointers are an abstraction. Today’s machines have virtual memory, divided in blocks called “pages”,…

Mar 12, 2023

-

Via the excellent Greg Whittaker newsletter:

Allegedly George Santos was training ATM skimmers and setting them up as affiliates. One who got arrested and deported from the US has come forward with the accusation.

Declaration:

-

Clinton Library

@WJCLibrary

Superman: Deadly Legacy was published by DC Comics, the U.S. Government, & UNICEF in 1996. In this special edition humanitarian comic book, Superman warns children in Bosnia-Herzegovina about the dangers of landmines. It was published in English, Serbian, and Croatian. #30Moments

Mar 13, 2023

-

Scott Shapiro

@scottjshapiro

Bank runs are significant because banks are where people keep their money.

Mar 12, 2023

@[email protected]

@pwnallthethings

@scottjshapiro It's also very unusual because banks do not normally run on the weekend

Mar 12, 2023

-

Nicolas Christin

@nc2y

Happy to have been able to provide data for this interesting @WIRED story by @benmorenne about one of the most prolific vendors on Alphabay.

On the Trail of the Fentanyl King

+++lead-in-text In a nondescript house on a quiet street in a middle-class suburb of Houston, Texas, Alaa Allawi hunched over his black and gold laptop. It was early 2017, and Allawi ranked among the top 10 vendors on [AlphaBay](https://www.wired.com/story/alphabay-series-part-1-the-shadow/), at th…

Mar 13, 2023

-

-

I spent few times working on #AVBurner, a post exploitation tools used by #SnakeCharmer (aka "Earth Longzhi" by #trendmicro). This tool disables kernel callbacks. With my colleagues from @[email protected], we wrote a small blog post explaining how it works. But also how to detect kernel callbacks manipulation by using #volatility. As #volshell supports MS symbols we are able to parse in memory kernel objects. More details here: https://www.volexity.com/blog/2023/03/07/using-memory-analysis-to-detect-edr-nullifying-malware/

Paul Rascagneres: "I spent few times working on #AVBurner, a post ex…" - Infosec Exchange

Attached: 2 images I spent few times working on #AVBurner, a post exploitation tools used by #SnakeCharmer (aka "Earth Longzhi" by #trendmicro). This tool disables kernel callbacks. With my colleagues from @volexity, we wrote a small blog post explaining how it works. But also how to detect kernel callbacks manipulation by using #volatility. As #volshell supports MS symbols we are able to parse in memory kernel objects. More details here: https://www.volexity.com/blog/2023/03/07/using-memory-an...

-

Expelled Russian Diplomats With Spy Links Resurface In Serbia

Exclusive: Expelled Russian Diplomats With Spy Links Resurface In Serbia

While many European states have shown the door to hundreds of Russian diplomats, not only have they found a new home in Serbia, but the country has taken in alleged Russian spies, an RFE/RL investigation reveals.

-