Collaborate Disseminate
I was wondering how threat actors actually test their exploits without them being automatically detected and added to the library of an antivirus detection system, thereby being marked as useless and shared with different vendors.
The simp… Continue reading How are virus or exploits tested without being detected?
I recently had an idea about this:
Why is the geo-location not used as authentication to ensure ownership of an account/login in addition to a password? This would work over GPS which is quite precise nowadays, up to 5 metres or so. I see … Continue reading Implementing geo-location factor for authentication
One big threat out there is typosquat domains. For example instead of:
steamcommunity.com some malicious actor will register the domain stearncornmunity.com and set up his fake steam login.
Why do companies not buy these "fake domains… Continue reading Why don’t bigger companies buy similar domains to their main domain to prevent typosquatting?