Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, March 23rd, 2021 https://isc.sans.edu/podcastdetail.html?id=7424, (Tue, Mar 23rd)
On Tuesday&#;x26;#;39;s Stormcast, Johannes talked about malware written in the Nim Programming language.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, March 22nd, 2021 https://isc.sans.edu/podcastdetail.html?id=7422, (Mon, Mar 22nd)
I have a couple of questions on my diary entry “Finding Metasploit & Cobalt Strike URLs“, thus I made a video that shows the method and explains in detail the checksum calculation.
Continue reading Video: Finding Metasploit & Cobalt Strike URLs, (Sun, Mar 21st)
There&#;x26;#;39;s a new version of YARA on GitHub, a pre-release for version 4.1.0.
With the growing threat of ransomware attacks, they are other malicious activities that have less attention today but they remain active. Think about crypto-miners. Yes, attackers continue to mine Monero on compromised systems. I spotted an interesting shell script that installs and runs a crypto-miner (SHA256:00e2ddca696426d9cad992662284d1f28b9ecd44ed7c1be39789417c1ea9a5f2[1]).
Continue reading Pastebin.com Used As a Simple C2 Channel, (Fri, Mar 19th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, March 19th, 2021 https://isc.sans.edu/podcastdetail.html?id=7420, (Fri, Mar 19th)
A keylogger is one of the core features implemented by many malware to exfiltrate interesting data and learn about the victim. Besides the fact that interesting keystrokes can reveal sensitive information&#;x26;#;xc2;&#;x26;#;xa0;(usernames,&#;x26;#;xc2;&#;x26;#;xa0;passwords, IP addresses, hostnames, …), just by&#;x26;#;xc2;&#;x26;#;xa0;having a look at the text typed on the keyboard, the attacker can profile his target and estimate if it&#;x26;#;39;s a juicy one or not.&#;x26;#;xc2;&#;x26;#;xa0;
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, March 18th, 2021 https://isc.sans.edu/podcastdetail.html?id=7418, (Thu, Mar 18th)