Collaborate Disseminate
Apple has released several updates for iPhones, iPads, Apple Watches, and Macs earlier today (May 24). More details are available on the Apple Security Updates website.
Continue reading Apple May 2021 Security Updates, (Mon, May 24th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, May 24th, 2021 https://isc.sans.edu/podcastdetail.html?id=7512, (Mon, May 24th)
The Internet is full of code snippets&#;x26;#;xc2;&#;x26;#;xa0;and free resources that you can embed in your projects. SmtpJS is one of those small projects that are very interesting for developers but also bad guys. It&#;x26;#;39;s the first time that I spot a phishing campaign that uses this piece of JavaScript code.
Continue reading “Serverless” Phishing Campaign, (Sat, May 22nd)
[Edited: The technique discussed in this diary is not mine and has been used without proper citation of the original author]
Continue reading Locking Kernel32.dll As Anti-Debugging Technique, (Fri, May 21st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, May 21st, 2021 https://isc.sans.edu/podcastdetail.html?id=7510, (Fri, May 21st)
You may have heard sayings like “If it is broken, it is probably a DNS problem. And if it isn&#;x26;#;39;t DNS, it is still a DNS problem”. Or “Everything that happens on your network is reflected in DNS.”. DNS is a great protocol, sometimes shamed for things it can&#;x26;#;39;t help itself with, and sometimes forgotten (if it works well). One of the amazing things I find about DNS is all its little nuances and how it all “fits together”. I planned this video series a couple months ago, and figured that this would be easy. I know DNS… but each time I look at DNS, I learn something new, so it has taken a while to get the first episodes together, and today I am releasing the first one. No fixed schedule on when they will be released (weekly?… if DNS doesn&#;x26;#;39;t prevent me to post them). No fixed end… not done yet considering topics and ideas.
Ransomware has been evolving, and each evolution appears to be a bit “meaner” than the first. Early ransomware targeted consumers. Encrypting baby pictures, or tax records, motivated users to pay in some cases a few hundred dollars to get their data back. The attacker went for easy targets and with that for easy money. But as most people dealing with consumers can attest to: Customer support is hard! Many consumers do not know how to use crypto currencies. Even the relatively straightforward Bitcoin payment can be too difficult. And forget about currencies like Monero that are often not traded on mainstream exchanges.
Continue reading And Ransomware Just Got a Bit Meaner (yes… it is possible), (Thu, May 20th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, May 20th, 2021 https://isc.sans.edu/podcastdetail.html?id=7508, (Thu, May 20th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, May 19th, 2021 https://isc.sans.edu/podcastdetail.html?id=7506, (Wed, May 19th)