RE: https://infosec.exchange/@greynoise/116047942661766828

FWIW, if you were using the #GAYINT block list for your Ivanti RMM system, that IP on the bulletproof AS200593 would have been blocked.

RE: https://infosec.exchange/@greynoise/116047942661766828

FWIW, if you were using the #GAYINT block list for your Ivanti RMM system, that IP on the bulletproof AS200593 would have been blocked.

Behind the scenes look at #GAYINT CTI curation.

https://www.infoblox.com/blog/threat-intelligence/compromised-routers-dns-and-a-tds-hidden-in-aeza-networks/

Maybe try blocking some full Aeza ASNs. The prefixes for AS210644 and AS216246 are already in the #GAYINT naughty list: https://intel.gayint.org/

https://www.infoblox.com/blog/threat-intelligence/compromised-routers-dns-and-a-tds-hidden-in-aeza-networks/

Maybe try blocking some full Aeza ASNs. The prefixes for AS210644 and AS216246 are already in the #GAYINT naughty list: https://intel.gayint.org/

@nyanbinary @hrbrmstr The ASN is there.

#GAYINT

Notepad++ have today confirmed their auto process was compromised by Chinese nation state threat actors, in a supply chain hack: https://notepad-plus-plus.org/news/hijacked-incident-info-update/

This backs up my blog from late last year, with #GAYINT threat actor mapping to Funky Stamen.

The infrastructure and update mechanisms have since been tightened. For what it’s worth - entry was to telcos and financial services with interests aligned to China. Notepad++ dev did a great job treating issue seriously.

Here’s my original blog with threat hunting suggestions: https://doublepulsar.com/small-numbers-of-notepad-users-reporting-security-woes-371d7a3fd2d9

Of note - the cyber industry entirely slept through it. A cartoon porg with #GAYINT threat intelligence had to blow it up.

Notepad++ have today confirmed their auto process was compromised by Chinese nation state threat actors, in a supply chain hack: https://notepad-plus-plus.org/news/hijacked-incident-info-update/

This backs up my blog from late last year, with #GAYINT threat actor mapping to Funky Stamen.

The infrastructure and update mechanisms have since been tightened. For what it’s worth - entry was to telcos and financial services with interests aligned to China. Notepad++ dev did a great job treating issue seriously.

Don't forget to put your puppygirls in a quiet room tonight. Fireworks can be loud and scary for them. #GAYINT #FURINT

Don't forget to put your puppygirls in a quiet room tonight. Fireworks can be loud and scary for them. #GAYINT #FURINT

As you may know, we do our fair amount of bitching here at GAYINT which made it difficult to narrow it down to one thing for a Festivus post. But we did. So let the airing of grievances commence.

https://blog.gayint.org/festivus.html

#GAYINT #FURINT #festivus

As you may know, we do our fair amount of bitching here at GAYINT which made it difficult to narrow it down to one thing for a Festivus post. But we did. So let the airing of grievances commence.

https://blog.gayint.org/festivus.html

#GAYINT #FURINT #festivus

@briankrebs

Hi Brian,

I'm reaching out with #GAYINT, INFOSEC's gayest CTI shitpost. We protect companies from AI snakeoilers with next-generation common sense. We have a major announcement CUmming Next Tuesday. I came across your profile and thought you'd be a great fit for a sponsored post supporting the news.

We're happy to start at $0 for a single post.

Our marketing team can provide you a content draft, so all you'll have to do is copy and paste

Let me know if you're up for it - we are finalizing our sponsored community soon. We tried reaching around to you on LinkedIn but it said we weren't premium enough to message you there.

Cheers,

@briankrebs

Hi Brian,

I'm reaching out with #GAYINT, INFOSEC's gayest CTI shitpost. We protect companies from AI snakeoilers with next-generation common sense. We have a major announcement CUmming Next Tuesday. I came across your profile and thought you'd be a great fit for a sponsored post supporting the news.

We're happy to start at $0 for a single post.

Our marketing team can provide you a content draft, so all you'll have to do is copy and paste

Let me know if you're up for it - we are finalizing our sponsored community soon. We tried reaching around to you on LinkedIn but it said we weren't premium enough to message you there.

Cheers,

I consulted the official #GAYINT threat actor mapping chart and made this diagram for Notepad++ hack attribution

#GAYINT

JavaScript libraries and frameworks are bad and the modern Internet should feel bad.

Edit because I forgot to add

https://blog.gayint.org/react.html

#GAYINT #FURINT