Ryan Westman
@ryanw3stman.bsky.social
Sr. Manager, Threat Research @sophossecurity.bsky.social | Cybersecurity | Threat Intelligence | National Security | Mis/Dis/Mal-information | #DEFCON30 / #Sleuthcon Speaker | GCTI GCFA GSLC | CAF vet
Pinned
Ryan Westman
@ryanw3stman.bsky.social
· Apr 7
Canada’s Draft Cybersecurity Legislation Must Be Resurrected
The goal was to create a standard to ensure key industries were properly addressing the risk from cyberthreats, foreign and domestic.
tinyurl.com
"Whichever party forms the government later this year, a top priority must be resurrecting Bill #C-26 with these additions. It should be a priority within the next government’s first 100 days." 🇨🇦
#canpoli #cybersecurity #cdnpoli
tinyurl.com/3sby8rbf
#canpoli #cybersecurity #cdnpoli
tinyurl.com/3sby8rbf
"Whichever party forms the government later this year, a top priority must be resurrecting Bill #C-26 with these additions. It should be a priority within the next government’s first 100 days." 🇨🇦
#canpoli #cybersecurity #cdnpoli
tinyurl.com/3sby8rbf
#canpoli #cybersecurity #cdnpoli
tinyurl.com/3sby8rbf
Canada’s Draft Cybersecurity Legislation Must Be Resurrected
The goal was to create a standard to ensure key industries were properly addressing the risk from cyberthreats, foreign and domestic.
tinyurl.com
April 7, 2025 at 10:29 PM
"Whichever party forms the government later this year, a top priority must be resurrecting Bill #C-26 with these additions. It should be a priority within the next government’s first 100 days." 🇨🇦
#canpoli #cybersecurity #cdnpoli
tinyurl.com/3sby8rbf
#canpoli #cybersecurity #cdnpoli
tinyurl.com/3sby8rbf
Check out the latest blog from the team on #earthkapre #redcurl #apt #threatintelligence 🇷🇺
www.esentire.com/blog/unravel...
IOCs: github.com/eSentire/ioc...
www.esentire.com/blog/unravel...
IOCs: github.com/eSentire/ioc...
Unraveling the Many Stages and Techniques Used by RedCurl/EarthKapre…
Learn more about how RedCurl/EarthKapre APT performs reconnaissance and espionage and get security recommendations from our Threat Response Unit (TRU) to…
www.esentire.com
February 14, 2025 at 4:48 PM
Check out the latest blog from the team on #earthkapre #redcurl #apt #threatintelligence 🇷🇺
www.esentire.com/blog/unravel...
IOCs: github.com/eSentire/ioc...
www.esentire.com/blog/unravel...
IOCs: github.com/eSentire/ioc...
Seeing a lot of 📤💣
Check out our latest advisory here:
www.esentire.com/security-adv...
#threatintelligence #threathunting #ransomware
Check out our latest advisory here:
www.esentire.com/security-adv...
#threatintelligence #threathunting #ransomware
Ongoing Email Bombing Campaigns leading to Remote Access and…
The Threat In recent weeks, eSentire has observed multiple Email Bombing attacks, which involve threat actors using phishing techniques to gain remote…
www.esentire.com
January 31, 2025 at 3:49 PM
Seeing a lot of 📤💣
Check out our latest advisory here:
www.esentire.com/security-adv...
#threatintelligence #threathunting #ransomware
Check out our latest advisory here:
www.esentire.com/security-adv...
#threatintelligence #threathunting #ransomware
This past summer I got to sit down with #heimdal's security publisher to talk #threatintelligence
patchmanagement.com/interview/ry...
patchmanagement.com/interview/ry...
An Interview With Ryan Westman: A Director of Threat Intelligence – Patch Management
patchmanagement.com
January 22, 2025 at 2:56 PM
This past summer I got to sit down with #heimdal's security publisher to talk #threatintelligence
patchmanagement.com/interview/ry...
patchmanagement.com/interview/ry...
Check out the teams latest blog on #MintsLoader #StealC #BOINC
www.esentire.com/blog/mintslo...
#IOCs here: github.com/eSentire/ioc...
www.esentire.com/blog/mintslo...
#IOCs here: github.com/eSentire/ioc...
MintsLoader: StealC and BOINC Delivery
In early January 2025, the eSentire Threat Response Unit (TRU) identified an ongoing campaign involving MintsLoader delivering second stage payloads like…
www.esentire.com
January 22, 2025 at 2:19 PM
Check out the teams latest blog on #MintsLoader #StealC #BOINC
www.esentire.com/blog/mintslo...
#IOCs here: github.com/eSentire/ioc...
www.esentire.com/blog/mintslo...
#IOCs here: github.com/eSentire/ioc...
Reposted by Ryan Westman
Wazawaka picked up in Russia. Involved in ransomware attacks on schools, hospitals, and DC police. Wouldn’t get too excited about extradition just yet. www.yahoo.com/tech/russia-...
Russia arrests ransomware attacker Wazawaka
The US Department of Justice is offering a $10 million reward for Mikhail Pavlovich Matveev.
www.yahoo.com
November 30, 2024 at 12:31 PM
Wazawaka picked up in Russia. Involved in ransomware attacks on schools, hospitals, and DC police. Wouldn’t get too excited about extradition just yet. www.yahoo.com/tech/russia-...
Check out our blogs on incidents we detected and responded to with #malware leveraged in the #contagiousinterview campaigns attributed to #DPRK #threatactors #threatintel
www.esentire.com/blog/bored-b...
www.esentire.com/blog/bored-b...
www.esentire.com/blog/bored-b...
www.esentire.com/blog/bored-b...
Bored BeaverTail Yacht Club – A Lazarus Lure
Learn more about the BeaverTail malware, and get security recommendations from our Threat Response Unit (TRU) to protect your business from this cyber…
www.esentire.com
November 26, 2024 at 10:09 PM
Check out our blogs on incidents we detected and responded to with #malware leveraged in the #contagiousinterview campaigns attributed to #DPRK #threatactors #threatintel
www.esentire.com/blog/bored-b...
www.esentire.com/blog/bored-b...
www.esentire.com/blog/bored-b...
www.esentire.com/blog/bored-b...
Had a great time last week @cyberwarcon.bsky.social thanks for a great event as always @hultquist.bsky.social #threatintelligence
November 25, 2024 at 8:40 PM
Had a great time last week @cyberwarcon.bsky.social thanks for a great event as always @hultquist.bsky.social #threatintelligence
Looking forward to @cyberwarcon.bsky.social tomorrow!
November 21, 2024 at 6:06 PM
Looking forward to @cyberwarcon.bsky.social tomorrow!
Had a great time earlier this year talking #deepfakes and #disinformation at ILTACON
November 21, 2024 at 1:53 PM
Had a great time earlier this year talking #deepfakes and #disinformation at ILTACON
Earlier this year I had the opportunity to sit down with @cbcnews-rss.bsky.social
to discuss the #nationalsecurity challenges 🇨🇦 faces from #cyberattacks and specifically #ransomware. Check out the interview here: tinyurl.com/4rpfvty4 & tinyurl.com/avefr3xj
November 20, 2024 at 10:23 PM
Earlier this year I had the opportunity to sit down with @cbcnews-rss.bsky.social
to discuss the #nationalsecurity challenges 🇨🇦 faces from #cyberattacks and specifically #ransomware. Check out the interview here: tinyurl.com/4rpfvty4 & tinyurl.com/avefr3xj
Reposted by Ryan Westman
For the second day in a row, people bring flowers to the Russian Consulate in Toronto, to mourn Alexey Navalny. Everyone is crying
February 17, 2024 at 11:37 PM
For the second day in a row, people bring flowers to the Russian Consulate in Toronto, to mourn Alexey Navalny. Everyone is crying
Proud of the hard work done by the team completing this deep dive on #batloader & #fakebat
www.esentire.com/resources/li...
www.esentire.com/resources/li...
Two Competing, Russian-Speaking Cybercrime Groups Attack Corporate…
Read this threat report to see how the BatLoader and FakeBat Malware-as-a-Service (MaaS) crime groups are giving low-level threat actors access to end-to-end attack campaigns that produce pools of cor...
www.esentire.com
December 22, 2023 at 2:43 AM
Proud of the hard work done by the team completing this deep dive on #batloader & #fakebat
www.esentire.com/resources/li...
www.esentire.com/resources/li...
Looking forward to a new #toque and seeing folks next week at @cyberwarcon.bsky.social! #Cyberwarcon
November 1, 2023 at 2:15 PM
Looking forward to a new #toque and seeing folks next week at @cyberwarcon.bsky.social! #Cyberwarcon
State of the world right now. At least it feels that way.
November 1, 2023 at 1:30 PM
State of the world right now. At least it feels that way.
Reposted by Ryan Westman
I think one of the things that's been shown with the denialism over Hamas atrocities is that AI disinformation fears are, oddly, overblown - because people will disbelieve things they don't want to believe *anyway.* AI is just an excuse.
October 27, 2023 at 1:49 PM
I think one of the things that's been shown with the denialism over Hamas atrocities is that AI disinformation fears are, oddly, overblown - because people will disbelieve things they don't want to believe *anyway.* AI is just an excuse.
Reposted by Ryan Westman
