John Kougoulos

👩‍💻 Recruiters or Data Harvesters? 👨‍💻 “Remember, hacking is more about just the code.” - Hackers (1995) I’ve noticed an alarming trend: numerous individuals claiming to be technical recruiters who, upon closer inspection, appear to have no real connections or credibility. It’s eerily reminiscent of the social engineering tactics depicted in The Matrix (1999) and Sneakers (1992). In a world where data is the new gold, recruiting for a job can sometimes feel like a sophisticated spear-phishing campaign. It’s vital to stay vigilant and ensure our personal data doesn’t fall into the wrong hands. To all the real tech enthusiasts and ethical hackers out there, let’s continue to protect our community. Verify, scrutinize, and always be one step ahead. After all, “the only way to win is not to play.” - WarGames (1983).

In this blog we introduce Thread-Name Calling - A new process injection technique using Thread Name. We also discuss various scenarios in which this not widely-known API can be used for offense.

A recent report from Check Point Research (CPR) has unveiled the activities of an Iranian hacker group known as Void Manticore, which has been linked to a series of destructive cyber attacks on Israel and Albania. Affiliated with Iran’s Ministry of Intelligence and Security (MOIS), Void Manticore operates alongside another Iranian threat actor, Scarred Manticore, to carry out these attacks. The group employs various online personas, such as "Karma" for attacks in Israel and "Homeland Justice" for those in Albania. Their tactics involve gaining initial access to target networks using publicly available tools and deploying custom wipers to render data inaccessible on both Windows and Linux systems. CPR’s analysis details a systematic collaboration between Void Manticore and Scarred Manticore. Initially, Scarred Manticore gains access and exfiltrates data from targeted networks. https://lnkd.in/gGfHKtwv