Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, December 4th 2019 https://isc.sans.edu/podcastdetail.html?id=6774, (Wed, Dec 4th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, December 3rd 2019 https://isc.sans.edu/podcastdetail.html?id=6772, (Tue, Dec 3rd)
Whenever I sign up for another shift, if I don&#;x26;#;39;t already have a diary topic in mind, I take a look at the top 10 ports in the dashboard when I login to isc.sans.edu. For the last few weeks, I&#;x26;#;39;ve noticed %%port:26%% showing up, so I decided to see if I could figure out what was going on there.
Continue reading Next up, what’s up with TCP port 26?, (Mon, Dec 2nd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, December 2nd 2019 https://isc.sans.edu/podcastdetail.html?id=6770, (Mon, Dec 2nd)
Continue reading ISC Snapshot: Search with SauronEye, (Fri, Nov 29th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, November 27th 2019 https://isc.sans.edu/podcastdetail.html?id=6768, (Wed, Nov 27th)
I was browsing through the Any Run sandbox looking through the public submissions of malware with pcaps of infection traffic from Tuesday 2019-11-26.&#;x26;#;xc2;&#;x26;#;xa0; I found this one, and it&#;x26;#;39;s tagged agenttesla.&#;x26;#;xc2;&#;x26;#;xa0; Agent Tesla is an information stealer.&#;x26;#;xc2;&#;x26;#;xa0; Based on the file name, this Agent Tesla malware sample may have been disguised as an installer for Discord.
Continue reading Finding an Agent Tesla malware sample, (Wed, Nov 27th)
Replying to phishing e-mails can lead to some interesting experiences (besides falling for the scams they offer, that is). Since it doesn’t require a deep technical know-how or any special expertise, it is something I recommend everyone to try out at least once, as it can lead to some funny moments and show us that the phishing trade doesn’t always operate in the way we might expect it to.
Continue reading Lessons learned from playing a willing phish, (Tue, Nov 26th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, November 26th 2019 https://isc.sans.edu/podcastdetail.html?id=6766, (Tue, Nov 26th)