Collaborate Disseminate
ABUS is usually better known for its “old-fashioned” mechanical locks. But as part of its b “Industry Solution” portfolio of products, ABUS is offering some more high-tech solutions, like, for example, network-connected cameras [;1];. Sadly, these cameras suffer from some of the same vulnerabilities as many similar cameras..png)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, May 22nd, 2023 https://isc.sans.edu/podcastdetail/8506, (Mon, May 22nd)
This is part three of a diary entry series. Part one can be found here and part two can be found here.
Continue reading Another Malicious HTA File Analysis – Part 3, (Sun, May 21st)
While reviewing my last findings today, I found a phishing email that delivered a classic .shtml file called “PROFORMA INVOICE.shtml”. Right now, nothing special, emails like this one are widespread. When you open the file in a sandbox, it reveals a classic form:
Continue reading Phishing Kit Collecting Victim’s IP Address, (Sat, May 20th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, May 19th, 2023 https://isc.sans.edu/podcastdetail/8504, (Fri, May 19th)
Today, Apple released macOS, iOS, iPadOS, tvOS, watchOS, and Safari updates.
A week ago, I wrote about Google starting to offer “.zip” domains and the possible risks associated with this [1]. Earlier today, I quickly surveyed registered .zip domains to see what people are doing with them.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, May 18th, 2023 https://isc.sans.edu/podcastdetail/8502, (Thu, May 18th)
This isn&#;x26;#;39;t a new attack vector, but I’ve found many malicious RAR SFX files in the wild for a few weeks. An âSFXâ file is a self-extracting archive that contains compressed files and is wrapped up with some executable code to decompress them on the fly. The final user receives an executable file (PE file) that can be launched with the need to install a specific tool to decompress the content. This technique has been used for a while by attackers, and even more interesting, the self-decompression routine can launch any executable (another executable, a script, â¦)[1]
Continue reading Increase in Malicious RAR SFX files, (Wed, May 17th)