Collaborate Disseminate
I spotted this interesting phishing campaign that (ab)uses the McAfee antivirus to make people scared. It starts with a classic email that notifies the targeted user that a McAfee subscription expired:
Continue reading McAfee Phishing Campaign with a Nice Fake Scan, (Mon, Jan 3rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, January 3rd, 2022 https://isc.sans.edu/podcastdetail.html?id=7818, (Mon, Jan 3rd)
Another issue affecting onPrem Exchange servers (bug affect 2016 & 2019) has been made public today where emails are trapped in the transport queues, this is related to a date check failure with the change of the new year. Microsoft has confirmed this is not a security related issue.
Continue reading Exchange Server – Email Trapped in Transport Queues, (Sun, Jan 2nd)
Last year, my professional relationship with computers entered its 30th year (in other words: for 30 years now, I&#;x26;#;39;m getting paid to work with computers).
Since today is the last day of 2021, I decided to take a closer look at malware that got caught by my malspam trap over the course of the year.
Continue reading Do you want your Agent Tesla in the 300 MB or 8 kB package?, (Fri, Dec 31st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, December 30th, 2021 https://isc.sans.edu/podcastdetail.html?id=7816, (Thu, Dec 30th)
As Apache Log4j 2 security vulnerabilities continue to surface, and are quickly addressed by the Log4j Security Team, keeping track of specific CVEs, severity, and affected versions can be a bit of a task on the fly. As such, herein is a quick table version of update guidance. The current supported version of Log4j2 for Java 8 is 2.17.1 as of this writing.
Continue reading Log4j 2 Security Vulnerabilities Update Guide, (Wed, Dec 29th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, December 29th, 2021 https://isc.sans.edu/podcastdetail.html?id=7814, (Wed, Dec 29th)
Continue reading LotL Classifier tests for shells, exfil, and miners, (Tue, Dec 28th)