Asheer Malhotra

@asheermalhotra

Threat Researcher @TalosSecurity. Metalhead. Shitposter. Not necessarily in that order. Opinions are my own. #CTI #APT @[email protected]

Joined October 2015

1,250

Asheer Malhotra
@asheermalhotra
Jan 6, 2024
BSides HBG 2024 is now open for talk submissions! #CFP
BSides Harrisburg
@BsidesHbg
Jan 6, 2024
Calling all #infosec rockstars! BSidesHBG 2024 is open for paper submissions! Submit your talks, workshops, and demos by [03/01/2024] for a chance to join the hottest infosec party in Harrisburg. Hit the link to unleash your inner speaker: bsideshbg.com/call-for-papers
Asheer Malhotra
@asheermalhotra
Dec 13, 2023
And lots of fun!! Can’t wait!
BSides Harrisburg
@BsidesHbg
Dec 13, 2023
Save the date for BSides Harrisburg 2024! We are excited to announce that the event will be held on Friday, April 12th. Mark your calendars and get ready for a day filled with insightful talks, engaging discussions, and networking opportunities. Stay tuned for more updates!
Asheer Malhotra
@asheermalhotra
Dec 13, 2023
Our latest research on Lazarus and Andariel APT with @Jungsoo_An , @_vventura and me ➡️
Cisco Talos Intelligence Group
@TalosSecurity
Dec 12, 2023
#LazarusGroup is back again, this time with "Operation Blacksmith," a Telegram-based malware that indicates a definitive shift in the tactics of the North Korean APT cs.co/6013ROH7F
Asheer Malhotra
@asheermalhotra
Sep 20, 2023
Check out our latest research on “ShroudedSnooper” targeting telecom orgs in the Middle East.
Cisco Talos Intelligence Group
@TalosSecurity
Sep 19, 2023
An actor we're calling "ShroudedSnooper" is actively targeting telecommunications companies in the Middle East using a previously undiscovered #malware family. More details on this threat and how users can stay protected cs.co/6015PCxv1
Asheer Malhotra
@asheermalhotra
Aug 25, 2023
More Lazarus #APT research with @_vventura and @Jungsoo_An ! Two blogs for double the intel!
Cisco Talos Intelligence Group
@TalosSecurity
Aug 24, 2023
#NorthKorea's Lazarus Group is back again, this time with two new remote access trojans. The attacker continues to use the same infrastructure, but is changing up their eventual payloads. More here: cs.co/6018PoxLp