Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, February 15th, 2022 https://isc.sans.edu/podcastdetail.html?id=7880, (Tue, Feb 15th)
If you still run a non-TLS web server, you may occasionally find requests like the following in your weblogs:
Continue reading Reminder: Decoding TLS Client Hellos to non TLS servers, (Mon, Feb 14th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, February 14th, 2022 https://isc.sans.edu/podcastdetail.html?id=7878, (Mon, Feb 14th)
This week I got this run-of-the-mill DHL phishing in my ISC inbox.Â; ;
; 
; Continue reading DHL Spear Phishing to Capture Username/Password, (Sun, Feb 13th)
A few days ago, I wrote a diary about a malicious ISO file being dropped via a simple HTML file[1]. I found another sample that again drops a malicious ISO file but this time, it is much more obfuscated and the VT score is⦠0! Yes, not detected by any antivirus solution! (SHA256:ef579d9bf2dba387c3be9effa09258902c4833dfb7634f4ed804d96e8849da74)
Continue reading CinaRAT Delivered Through HTML ID Attributes, (Fri, Feb 11th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, February 11th, 2022 https://isc.sans.edu/podcastdetail.html?id=7876, (Fri, Feb 11th)
Apple today released updates for iOS, iPadOS and macOS.
I have been talking a lot about various network storage devices and how you never ever want to expose them to the Internet. The brands that usually come up are Synology and QNAP, which have a significant market share. But they are not alone. Pretty much all these devices follow the same basic pattern: Build a reasonably powered server with a bunch of disks, and allow users to install various vulnerable web apps to manage these devices, or better: Install them by default and call them “Features.”
Continue reading Zyxel Network Storage Devices Hunted By Mirai Variant, (Thu, Feb 10th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, February 10th, 2022 https://isc.sans.edu/podcastdetail.html?id=7874, (Thu, Feb 10th)