Author Archives: SANS Internet Storm Center, InfoCON: green
ISC Stormcast For Tuesday, February 11th 2020 https://isc.sans.edu/podcastdetail.html?id=6862, (Tue, Feb 11th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, February 11th 2020 https://isc.sans.edu/podcastdetail.html?id=6862, (Tue, Feb 11th)
Current PayPal phishing campaign or “give me all your personal information”, (Mon, Feb 10th)
One of my colleagues sent me a new PayPal phishing e-mail today. Although it was fairly usual, as phishing e-mails go, since the campaign is still active and since it shows the current “let’s take all that we can get” mentality of the attackers quite well, I thought it was worth a short diary.
ISC Stormcast For Monday, February 10th 2020 https://isc.sans.edu/podcastdetail.html?id=6860, (Mon, Feb 10th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, February 10th 2020 https://isc.sans.edu/podcastdetail.html?id=6860, (Mon, Feb 10th)
After Action Review, (Sat, Feb 8th)
Sandbox Detection Tricks & Nice Obfuscation in a Single VBScript , (Fri, Feb 7th)
I found an interesting VBScript sample that is a perfect textbook case for training or learning purposes. It implements a nice obfuscation technique as well as many classic sandbox detection mechanisms. The script is a dropper: it extracts from its code a DLL that will be loaded if the script is running outside of a sandbox. Its current VT score is 25/57 (SHA256: 29d3955048f21411a869d87fb8dc2b22ff6b6609dd2d95b7ae8d269da7c8cc3d)[1].
Continue reading Sandbox Detection Tricks & Nice Obfuscation in a Single VBScript , (Fri, Feb 7th)
ISC Stormcast For Friday, February 7th 2020 https://isc.sans.edu/podcastdetail.html?id=6858, (Fri, Feb 7th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, February 7th 2020 https://isc.sans.edu/podcastdetail.html?id=6858, (Fri, Feb 7th)
ISC Stormcast For Thursday, February 6th 2020 https://isc.sans.edu/podcastdetail.html?id=6856, (Thu, Feb 6th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, February 6th 2020 https://isc.sans.edu/podcastdetail.html?id=6856, (Thu, Feb 6th)
Fake browser update pages are “still a thing”, (Wed, Feb 5th)
ISC Stormcast For Wednesday, February 5th 2020 https://isc.sans.edu/podcastdetail.html?id=6854, (Wed, Feb 5th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, February 5th 2020 https://isc.sans.edu/podcastdetail.html?id=6854, (Wed, Feb 5th)