Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Joshua Platt
Golang backdoor with a side of ChromeUpdateAlert App
By: Jason Reaves and Joshua Platt Recently a few articles have come out talking about new malware that people are associating with Contagious Interview[1,2] activity. The activity described[3,4] appears to take some tactics from recent cybercrime campaigns such as ClickFix[6].
Agent AI, Basta Parser Extraordinaire
Joshua Platt · Follow Published in Walmart Global Tech Blog · 4 min read · -- Black Basta is a ransomware group that has spent the past couple of years attacking global networks. Their activities are well known in the cybersecurity space. Some might even say prolific at this point. On Feb 11, 2025 internal communication amongst the group was publicly leaked¹. The leaked data consisted of matrix server chat logs with information pertaining to the day to day operations of the group.
Inside a TrickBot Cobalt Strike Attack Server
Research by Joshua Platt and Jason Reaves Executive Summary Trickbot operators utilized PowerTrick and Cobalt Strike to deploy their Anchor backdoor and RYUK ransomware We review the Cobalt Strike portion of the server and how the actors were leveraging it against multiple targets. Background TrickBot is the successor of Dyre which at first was primarily focused on banking fraud, even reusing the same web-injection systems utilized by Dyre.
ICEDID Botnet | The Iceman Goes Phishing for US Tax Returns
In light of the extended tax deadline due to the coronavirus pandemic, tax fraud remains a viable avenue for the criminal group behind the IcedId banking malware. By Joshua Platt, Jason Reaves, Vitali Kremez Executive Summary IcedID is actively harvesting tax-related information. IcedID also actively seeks to procure important documents. The gang utilizes custom PowerShell uploaders to exfiltrate specific tax data.
Crossing the Ecosystem Boundaries: How ServiceNow, Salesforce and Atlassian Work Together
Although these platforms were originally designed to serve different functional roles—Atlassian’s help desk, ServiceNow’s IT service management and Salesforces’ sales and CRM—from the outset, they all addressed the evolving mega-management and leadership issue: collaboration across teams and business units. Independent action, siloed organizations and disconnected thinking was increasingly giving way to more agile, interdependent, collaborative problem-solving practices and methodologies.
5 Reports Your Stakeholders Need to Meet OKRs
Save {{ articles[0].views | formatCount}} Views Join the DZone community and get the full member experience. Join For Free Hold on to your steaks! As much as 60% of Objectives and Key Results (OKRs) are set from the bottom up, often leaving alignment with organizational goals for later. This can lead to painful inefficiency and poor planning. To help alleviate the pain, consider providing stakeholders these five reports.
Make DevOps Relatable With Stories
Stories have played a central role in the Agile transformation of software development teams around the world. Really, stories have been with us since the dawn of communication amongst groups. From cave walls to fairytales recounted and passed down through generations. They have evolved in delivery, but their purpose remains the same: to share common experiences, to teach, and to pass on wisdom.
The Challenges of Cobalt Strike Server Fingerprinting
By Jason Reaves and Joshua Platt The misuse of legitimate security tools by criminals and state-sponsored actors has been a dilemma for close to two decades. Penetration-testing software and red-teaming frameworks were built for the purpose of testing the defenses of enterprise networks, but that hasn’t stopped individuals and collectives with malicious intent from pirating or hacking these tools and using them to nefarious ends.
Newly Discovered Malware Framework Cashing in on Ad Fraud
By Jason Reaves & Joshua Platt A newly discovered malware framework is responsible for more than one billion fraudulent ad impressions in the past three months, generating its operators significant Google AdSense revenue on a monthly basis.
Wipro Threat Actors Active Since 2015
By Jason Reaves, Joshua Platt, and Allison Nixon As more layers of the Wipro breach are peeled away, new intelligence about the actors behind the attack on one of India’s largest IT outsourcing and consulting organizations has emerged. Evidence uncovered by Flashpoint researchers links the threat actors to other malicious activity dating back to 2017, and possibly 2015, as well as the re-use of infrastructure from those older attacks.
Four Ways to Improve DevOps Visibility
Save {{ articles[0].views | formatCount}} Views Join the DZone community and get the full member experience. Join For Free Overview DevOps, by design, works quickly and accomplishes deadline-driven projects rapidly. With this high amount of project turnover, visibility into key operational data is easy to mismanage and can lead to simple mistakes, lack of optimization, and organizational misalignment.
DevOps Is a Philosophy, Not a Title
Save {{ articles[0].views | formatCount}} Views Join the DZone community and get the full member experience. Join For Free Whenever I discuss DevOps with someone outside of engineering, there is a common theme to their reaction, something along the lines of, “Oh, is that a new position in IT?” This bothers me because it implies DevOps: is new, and somehow duct-taped onto IT; is the responsibility of someone or a small group; that someone is not them. In some ways, this reaction is not wrong.
FIN7 Revisited: Inside Astra Panel and SQLRat Malware
By Joshua Platt and Jason Reaves Despite the arrests of three prominent members of the FIN7 cybercrime gang beginning in January 2018, attacks targeting businesses and customer payment card information did not cease. The latest evidence involves the discovery of a new administrative panel and previously unseen malware samples that Flashpoint analysts are linking to this notorious group. Activity from this campaign dates from May to July 2018, but could go back farther to January 2018.
‘DMSniff’ POS Malware Actively Leveraged to Target Small-, Medium-Sized Businesses
By Jason Reaves & Joshua Platt Point-of-sale malware previously only privately sold has been used in breaches of small- and medium-sized businesses in the restaurant and entertainment industries. The malware, known as DMSniff, also uses a domain generation algorithm (DGA) to create lists of command-and-control domains on the fly.
5 Tips to Evangelize DevOps in Your Company
Save {{ articles[0].views | formatCount}} Views Join the DZone community and get the full member experience. Join For Free Learn how integrating security into DevOps to deliver "DevSecOps" requires changing mindsets, processes and technology. While the DevOps movement has continued to see adoption across organizations of all sizes, it can still be difficult to initiate the changes needed to roll out DevOps.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Joshua
Contact Joshua, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack