Incident Response @Google (@Mandiant)

Joined November 2010
31 Photos and videos
Mathias Frank retweeted
šŸš€ Mandiant Community Night is back šŸš€ Join us on Thursday 13th Feb, 17:30 at Google London for exclusive insights on real-world attack trends, and connect with Cyber Security professionals! šŸŽŸļø Limited spots—RSVP now: bit.ly/40ERjzq
3
16
2,399
The Mandiant Community Night šŸ‡¬šŸ‡§ is back for 2025! Join us on February 13 in our London @Google office. You can expect a night of technical talks and networking with drinks and pizza! Spots are limited so get your names in to not miss out. rsvp.withgoogle.com/events/m…
113
Mathias Frank retweeted
22 Nov 2024
.@Volexity’s latest blog post describes in detail how a Russian APT used a new attack technique, the ā€œNearest Neighbor Attackā€, to leverage Wi-Fi networks in close proximity to the intended target, while the attacker was halfway around the world. volexity.com/blog/2024/11/22… #dfir
6
173
382
94,865
You want to investigate challenging and impactful intrusions? Mandiant has an opening for an Incident Response Consultant in their UK&I teamšŸ”„ google.com/about/careers/app… #Mandiant #Google

1
2
138
Mathias Frank retweeted
We released our analysis of Pygmy Goat - a native x86-32 ELF shared object that was discovered on Sophos XG firewall devices, providing backdoor access to the device. ncsc.gov.uk/static-assets/do… Yara / STIX / Snort etc ncsc.gov.uk/section/keep-up-…
4
106
235
25,248
Mathias Frank retweeted
3 May 2024
🧐 SSSCIP unveils new report: russian Cyber Operations (H2 2023)šŸ‘‡ cip.gov.ua/en/news/kiberoper… #cybercrime #cyberattack #hacker #cybersecurity #cyber #cyberwar #hybridwar #Espionage #spy
2
21
34
21,739
Mathias Frank retweeted
Mandiant reveals that a ā€œhacktivistā€ persona created by APT44, has recently targeted & disrupted U.S. and Polish water utilities, as well as a French dam. Read more on our latest findings here: bit.ly/4aS7RYe #Mandiant #APT44
1
82
173
27,979
We have another opening in Mandiant's UK Incident Response team! #Mandiant #Google google.com/about/careers/app…

You want to investigate the most challenging and impactful intrusions? We are looking for an incident responder to join our UK team šŸ”„ #Mandiant #Google
2
3
552
Mathias Frank retweeted
APT29 (Midnight Blizzard/Cozy Bear) is targeting German political parties. The SVR has been on a tear lately and their mission of keeping Putin up to date on the West's thinking is especially important at this critical moment in the war. 1/2 mandiant.com/resources/blog/…
6
99
190
52,506
You want to investigate the most challenging and impactful intrusions? We are looking for an incident responder to join our UK team šŸ”„ #Mandiant #Google
At long last we're recruiting for an incident responder in our UK team! If you're looking to work on some of the most challenging and impactful breaches around, this role is for you! google.com/about/careers/app…
4
4
1,364
Mathias Frank retweeted
Really cool to see how the recent critical Citrix Netscaler exploit worked to gain access to appliances thanks to @googlecloud @Mandiant Matthias Frank at @SANSInstitute @NCSC #CyberThreat23
4
14
1,785
šŸ”„
Replying to @Mandiant
@Mandiant has identified 0- and n-day exploitation of Citrix NetScaler #CVE-2023-4966, which was abused to hijack sessions and compromise multiple organisations going back to late August 2023. Here is a summary of what we found: mandiant.com/resources/blog/…
1
220
Mathias Frank retweeted
UNC3886 has been exploiting a 0-day vulnerability in VMware ESXi hypervisors. See our latest blog for more on this group, as well as steps organizations can take to detect and respond to a newly exploited 0-day vulnerabilityĀ in VMware ESXi hypervisors. mandiant.com/resources/blog/…
66
151
43,661
Mathias Frank retweeted
On May 31, 2023, Progress Software Corporation announced a wide exploitation of zero-day vulnerability in the MOVEit Transfer secure managed file transfer software. Learn more here: mndt.info/3oGS8ZN

12
16
7,789
Mathias Frank retweeted
Currently working on my new open-source project "Artifact-Graph", a knowledge graph that let's you explore overlaps and pivot points of forensic artifacts. A very early Alpha version is online available at sebastiandemmer.github.io/ar… Let me know what you think!
1
12
39
5,054
Mathias Frank retweeted
M-Trends 2023 is live! Download the 14th edition of Mandiant’s unique analysis of today’s cyber threat landscape today. mandiant.com/m-trends #MTrends #Cybersecurity
2
34
53
19,372
Mathias Frank retweeted
"Mandiant responded to multiple UNC2970 intrusions targeting U.S. and European Media organizations through spear-phishing that used a job recruitment theme" mandiant.com/resources/blog/…
9
17
3,639
I will be speaking at @BSidesCymru šŸ“ó §ó ¢ó ·ó ¬ó ³ó æ this Saturday in Cardiff, UK. Let me know if anyone is attending and wants to meetup. "When diplomats send BEACON - A retrospective view of APT29 malicious phishing campaigns " pretalx.com/bsides-cymru-202…
2
7
24
3,471
I have a spare ticket for @BSidesCymru šŸ”„ on Saturday 11/02 in Cardiff, UK. Please PM me if you are interested. #BSidesCymru
1
2
1
754