Password Protected Malicious Excel Files, (Mon, Apr 6th)
We&#;x26;#;39;ve been seeing quite some malicious Excel files with Excel 4 macros lately.
Continue reading Password Protected Malicious Excel Files, (Mon, Apr 6th)
Author Archives: SANS Internet Storm Center, InfoCON: green
ISC Stormcast For Monday, April 6th 2020 https://isc.sans.edu/podcastdetail.html?id=6940, (Mon, Apr 6th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, April 6th 2020 https://isc.sans.edu/podcastdetail.html?id=6940, (Mon, Apr 6th)
Maldoc XLS Invoice with Excel 4 Macros, (Sun, Apr 5th)
This week I got an email claiming to be a YellowPages invoice with an XLS attachment containing an Excel 4.0 macro which has similarity to [1][2].
Continue reading Maldoc XLS Invoice with Excel 4 Macros, (Sun, Apr 5th)
New Bypass Technique or Corrupt Word Document?, (Sat, Apr 4th)
I was taking a closer look at Xavier&#;x26;#;39;s Word document he analyzed in yesterday&#;x26;#;39;s diary entry: “Obfuscated with a Simple 0x0A“.
Continue reading New Bypass Technique or Corrupt Word Document?, (Sat, Apr 4th)
Obfuscated with a Simple 0x0A, (Fri, Apr 3rd)
With the current Coronavirus pandemic, we continue to see more and more malicious activity around this topic. Today, we got a report from a reader who found a nice malicious Word document part of a&#;x26;#;xc2;&#;x26;#;xa0;Coronavirus phishing campaign. I don&#;x26;#;39;t know how the URL was distributed (probably via email) but the landing page is&#;x26;#;xc2;&#;x26;#;xa0;fake White House-themed page. So, probably targeting US citizens.
Continue reading Obfuscated with a Simple 0x0A, (Fri, Apr 3rd)
ISC Stormcast For Friday, April 3rd 2020 https://isc.sans.edu/podcastdetail.html?id=6938, (Fri, Apr 3rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, April 3rd 2020 https://isc.sans.edu/podcastdetail.html?id=6938, (Fri, Apr 3rd)
ISC Stormcast For Thursday, April 2nd 2020 https://isc.sans.edu/podcastdetail.html?id=6936, (Thu, Apr 2nd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, April 2nd 2020 https://isc.sans.edu/podcastdetail.html?id=6936, (Thu, Apr 2nd)
TPOT’s Cowrie to ISC Logs, (Thu, Apr 2nd)
ISC Stormcast For Wednesday, April 1st 2020 https://isc.sans.edu/podcastdetail.html?id=6934, (Wed, Apr 1st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, April 1st 2020 https://isc.sans.edu/podcastdetail.html?id=6934, (Wed, Apr 1st)