Hi! As you know, we davno ugoreli po threat Intelligence, so we do provide yet another material for TI skillz improving. Enjoy the reading from Anomali. No, it is not a f*cking marketing. It`s just to keep your hands on whats going.

Microsoft Internet Explorer v11 XML External Entity Injection 0day + PoC Exploit
http://hyp3rlinx.altervista.org/advisories/MICROSOFT-INTERNET-EXPLORER-v11-XML-EXTERNAL-ENTITY-INJECTION-0DAY.txt

Do not miss! This book was in "hide" status and has recently become available in public. Godnota po #threat #intelligence.
CYBEREDGE: "The Threat Intelligence Handbook. A Practical Guide for Security Teams to Unlocking the Power of Intelligence"

Playtech is looking for:
1) SOC analyst (light skills level)
https://rabota.ua/company2701998/vacancy7601858

2) Security Engineer (advanced level)
https://rabota.ua/company2701998/vacancy7601425

Meet some new godnota!
"VirusTotal for Investigators". Methods for using VirusTotal data to deep dive into malware campaigns.

FBI, sad but true.

https://techcrunch.com/2019/04/12/police-data-hack/

Wroom wroom...

https://twitter.com/DevinStokes/status/1118263990067425281

Firefox, CVE-2018-18500 A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML elements. This results in the stream parser object being freed while still in use, leading to a potentially exploitable crash.
+ POC exploit.
https://github.com/sophoslabs/CVE-2018-18500/

APT34 tools full LEAK
pass:vJrqJeJo2n005FF*

APT34 / OILRIG LEAK, QUICK ANALYSIS by MISTERCH0C:
https://misterch0c.blogspot.com/2019/04/apt34-oilrig-leak.html

BlueCommand is a dashboard and tooling front-end for PowerShell Empire using PowerShell Universal Dashboard from Adam Driscoll.
https://github.com/leeberg/BlueCommand

DLL hijacking and #lateral #movement. Discovery methodology, detections, proof of concept code, demos and more!
https://posts.specterops.io/lateral-movement-scm-and-dll-hijacking-primer-d2f61e8ab992

Fileless linux malware framework thats crossplatform and allows users to easily create and manage payloads. Meet fireELF!
https://github.com/rek7/fireELF

Hmmm....

https://krebsonsecurity.com/2019/04/marcus-malwaretech-hutchins-pleads-guilty-to-writing-selling-banking-malware/

Sandmap: #NMAP on steroids. Is a tool supporting network and system reconnaissance using the massive Nmap engine. It provides a user-friendly interface, automates and speeds up scanning and allows you to easily use many advanced scanning techniques.|
https://github.com/trimstray/sandmap