Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, February 21st, 2023 https://isc.sans.edu/podcastdetail.html?id=8378, (Tue, Feb 21st)
I end my diary entry âDetecting (Malicious) OneNote Filesâ with a set of Suricata rules to detect various OneNote files.
I end my diary entry âDetecting (Malicious) OneNote Filesâ with a set of Suricata rules to detect various OneNote files.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, February 20th, 2023 https://isc.sans.edu/podcastdetail.html?id=8376, (Mon, Feb 20th)
Sometimes I download a Windows executable and when I run it, I get an error message “Unsupported 16-bit Application”:
Continue reading “Unsupported 16-bit Application” or HTML?, (Sun, Feb 19th)
Reviewing my ISC mail inbox, I noticed that I had been receiving multiple phishing email that were very similar. Putting my cursor over each embedded pictures, I noticed the domain involved was the same for all of them. I copied the URL and started checking around for known threat intel on ipfs[.]io against various sites and found on urlscan.io [1], there was over 10000+ samples listed.
Continue reading Spear Phishing Handlers for Username/Password, (Sat, Feb 18th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, February 17th, 2023 https://isc.sans.edu/podcastdetail.html?id=8374, (Fri, Feb 17th)
Although the browser-in-the-browser (BitB) technique has been with us for a while now[1], it is far from what one might call ubiquitous. Simply put, the technique is based on displaying a simulated browser pop-up window (usually a login prompt) within the confines of an HTML page opened in a browser. The simulated pop-up may look almost indistinguishable from a real browser window and since it may contain an arbitrary URL in the simulated address bar, the use of the BitB technique for phishing can be quite effective, as most people have been repeatedly taught that they should âcheck the URL, and if it is the right one, the page should be genuineâ during security awareness courses.
Continue reading HTML phishing attachment with browser-in-the-browser technique, (Thu, Feb 16th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, February 16th, 2023 https://isc.sans.edu/podcastdetail.html?id=8372, (Thu, Feb 16th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, February 16th, 2023 https://isc.sans.edu/podcastdetail.html?id=8372, (Thu, Feb 16th)