{"id": 1367671451277475843, "geo": null, "lang": "en", "text": "FireEye on Microsoft Exchange Server vulns: \"We have identified an array of affected victims including US-based ret\u2026 https://t.co/JH3eXMe5ka", "user": {"id": 3817401, "url": "https://t.co/o0CAm0qH3i", "lang": null, "name": "Eric Geller", "id_str": "3817401", "entities": {"url": {"urls": [{"url": "https://t.co/o0CAm0qH3i", "indices": [0, 23], "display_url": "ericjgeller.com", "expanded_url": "http://www.ericjgeller.com"}]}, "description": {"urls": [{"url": "https://t.co/KOwD1XBRn1", "indices": [136, 159], "display_url": "bit.ly/contactejg", "expanded_url": "http://bit.ly/contactejg"}]}}, "location": "Washington, D.C.", "verified": true, "following": true, "protected": false, "time_zone": null, "created_at": "Sun Apr 08 20:27:11 +0000 2007", "utc_offset": null, "description": "Cybersecurity reporter at @politico covering federal cyber policy, election security, and the rest of our hackable world. Send me tips: https://t.co/KOwD1XBRn1", "geo_enabled": true, "screen_name": "ericgeller", "listed_count": 2312, "friends_count": 901, "is_translator": false, "notifications": false, "statuses_count": 272640, "default_profile": false, "followers_count": 87305, "translator_type": "regular", "favourites_count": 3, "profile_image_url": "http://pbs.twimg.com/profile_images/1225464600860266497/Kn1BnOCJ_normal.jpg", "profile_banner_url": "https://pbs.twimg.com/profile_banners/3817401/1581007485", "profile_link_color": "1B95E0", "profile_text_color": "000000", "follow_request_sent": false, "contributors_enabled": false, "has_extended_profile": true, "default_profile_image": false, "is_translation_enabled": false, "profile_background_tile": false, "profile_image_url_https": "https://pbs.twimg.com/profile_images/1225464600860266497/Kn1BnOCJ_normal.jpg", "profile_background_color": "000000", "profile_sidebar_fill_color": "000000", "profile_background_image_url": "http://abs.twimg.com/images/themes/theme1/bg.png", "profile_sidebar_border_color": "000000", "profile_use_background_image": false, "profile_background_image_url_https": "https://abs.twimg.com/images/themes/theme1/bg.png"}, "place": null, "id_str": "1367671451277475843", "source": "<a href=\"https://about.twitter.com/products/tweetdeck\" rel=\"nofollow\">TweetDeck</a>", "entities": {"urls": [{"url": "https://t.co/JH3eXMe5ka", "indices": [117, 140], "display_url": "twitter.com/i/web/status/1\u2026", "expanded_url": "https://twitter.com/i/web/status/1367671451277475843"}], "symbols": [], "hashtags": [], "user_mentions": []}, "favorited": false, "retweeted": false, "truncated": true, "created_at": "Fri Mar 05 03:00:58 +0000 2021", "coordinates": null, "contributors": null, "quoted_status": {"id": 1367653435961716738, "geo": null, "lang": "en", "text": "We've been seeing Exchange Server exploitation dating back to at least January 2021. Introducing UNC2639, UNC2640,\u2026 https://t.co/f5ewZa0o2e", "user": {"id": 2278322521, "url": "https://t.co/EpT3i3klke", "lang": null, "name": "Matt Bromiley \ud83c\uddfa\ud83c\uddf8", "id_str": "2278322521", "entities": {"url": {"urls": [{"url": "https://t.co/EpT3i3klke", "indices": [0, 23], "display_url": "medium.com/@bromiley", "expanded_url": "https://medium.com/@bromiley"}]}, "description": {"urls": [{"url": "https://t.co/zDv6JNvjZ5", "indices": [26, 49], "display_url": "OpenSOC.io", "expanded_url": "http://OpenSOC.io"}, {"url": "https://t.co/EpT3i3klke", "indices": [121, 144], "display_url": "medium.com/@bromiley", "expanded_url": "https://medium.com/@bromiley"}]}}, "location": "Dallas, TX", "verified": false, "following": false, "protected": false, "time_zone": null, "created_at": "Mon Jan 06 01:19:13 +0000 2014", "utc_offset": null, "description": "Dad, Security Researcher, https://t.co/zDv6JNvjZ5 Vol, Incident responder, SANS instructor, All-Around DFIR Lover. Blog: https://t.co/EpT3i3klke", "geo_enabled": false, "screen_name": "_bromiley", "listed_count": 171, "friends_count": 1184, "is_translator": false, "notifications": false, "statuses_count": 5352, "default_profile": false, "followers_count": 6622, "translator_type": "none", "favourites_count": 1738, "profile_image_url": "http://pbs.twimg.com/profile_images/1181216004124352512/Bdl9nFhg_normal.jpg", "profile_banner_url": "https://pbs.twimg.com/profile_banners/2278322521/1483769464", "profile_link_color": "91D2FA", "profile_text_color": "000000", "follow_request_sent": false, "contributors_enabled": false, "has_extended_profile": false, "default_profile_image": false, "is_translation_enabled": false, "profile_background_tile": false, "profile_image_url_https": "https://pbs.twimg.com/profile_images/1181216004124352512/Bdl9nFhg_normal.jpg", "profile_background_color": "000000", "profile_sidebar_fill_color": "000000", "profile_background_image_url": "http://abs.twimg.com/images/themes/theme1/bg.png", "profile_sidebar_border_color": "000000", "profile_use_background_image": false, "profile_background_image_url_https": "https://abs.twimg.com/images/themes/theme1/bg.png"}, "place": null, "id_str": "1367653435961716738", "source": "<a href=\"https://about.twitter.com/products/tweetdeck\" rel=\"nofollow\">TweetDeck</a>", "entities": {"urls": [{"url": "https://t.co/f5ewZa0o2e", "indices": [116, 139], "display_url": "twitter.com/i/web/status/1\u2026", "expanded_url": "https://twitter.com/i/web/status/1367653435961716738"}], "symbols": [], "hashtags": [], "user_mentions": []}, "favorited": false, "retweeted": false, "truncated": true, "created_at": "Fri Mar 05 01:49:23 +0000 2021", "coordinates": null, "contributors": null, "retweet_count": 125, "favorite_count": 223, "is_quote_status": false, "possibly_sensitive": false, "in_reply_to_user_id": null, "in_reply_to_status_id": null, "in_reply_to_screen_name": null, "in_reply_to_user_id_str": null, "in_reply_to_status_id_str": null}, "retweet_count": 24, "favorite_count": 34, "is_quote_status": true, "quoted_status_id": 1367653435961716738, "possibly_sensitive": false, "in_reply_to_user_id": null, "quoted_status_id_str": "1367653435961716738", "in_reply_to_status_id": null, "in_reply_to_screen_name": null, "in_reply_to_user_id_str": null, "in_reply_to_status_id_str": null}