Collaborate Disseminate
Yesterday I&#;x26;#;39;ve read an article[1] about the clipboard on iPhones and how it can disclose sensitive information about the device owner. At the end of the article, the author gave a reference to an iPhone app[2] that discloses the metadata of pictures copied to the clipboard (like the GPS coordinates).
Continue reading Show me Your Clipboard Data!, (Fri, Feb 28th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, February 28th 2020 https://isc.sans.edu/podcastdetail.html?id=6888, (Fri, Feb 28th)
Many offensive tools can be very useful for defenders too. Indeed, if they can help to gather more visibility about the environment that must be protected, why not use them&#;x26;#;x3f;&#;x26;#;xc2;&#;x26;#;xa0;More information you get, more you can be proactive and visibility is key.&#;x26;#;xc2;&#;x26;#;xa0;A good example is the combination of a certificate transparency list&#;x26;#;x5b;1&#;x26;#;x5d; with a domain monitoring tool like Dnstwist&#;x26;#;x5b;2&#;x26;#;x5d;, you could spot domains that have been registered and associated with a SSL certificate: It&#;x26;#;39;s a good indicator that an attack is being prepared (like a phishing campaign).
Continue reading Offensive Tools Are For Blue Teams Too, (Thu, Feb 27th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, February 27th 2020 https://isc.sans.edu/podcastdetail.html?id=6886, (Thu, Feb 27th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, February 26th 2020 https://isc.sans.edu/podcastdetail.html?id=6884, (Wed, Feb 26th)
Since I was exposed to three different online scam campaigns in the last three weeks, without having to go out and search for them, I thought that today might be a good time to take a look at how some of the current online scams work.
Continue reading Quick look at a couple of current online scam campaigns, (Tue, Feb 25th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, February 25th 2020 https://isc.sans.edu/podcastdetail.html?id=6882, (Tue, Feb 25th)
Philippe Lagadec, the developer of ole-tools, pointed out something interesting about the following maldoc sample (MD5 a0457c2728923cb46e6d9797fe7d81dd): it contains both Excel 4 macros and VBA code.
Continue reading Maldoc: Excel 4 Macros and VBA, Devil and Angel?, (Mon, Feb 24th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, February 24th 2020 https://isc.sans.edu/podcastdetail.html?id=6880, (Mon, Feb 24th)
I&#;x26;#;39;ve mentioned Excel 4 macros before, a scripting technology that predates VBA.
Continue reading Maldoc: Excel 4 Macros in OOXML Format, (Sun, Feb 23rd)