Collaborate Disseminate
[This is a guest diary submitted by Jan Kopriva. Jan is working for Alef Nula (http://www.alef.com) and you can follow him on Twitter at @jk0pr]
Continue reading [Guest Diary] Tricky LNK points to TrickBot, (Tue, Sep 3rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, September 3rd 2019 https://isc.sans.edu/podcastdetail.html?id=6648, (Tue, Sep 3rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, September 2nd 2019 https://isc.sans.edu/podcastdetail.html?id=6646, (Mon, Sep 2nd)
Yesterday, I wrote a diary about misused Microsoft tools[1]. I just found another interesting piece of code. This time the malware is using Node.js[2]. The malware is a JScript (SHA256:1007e49218a4c2b6f502e5255535a9efedda9c03a1016bc3ea93e3a7a9cf739c)[3]
Continue reading Malware Dropping a Local Node.js Instance, (Fri, Aug 30th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, August 30th 2019 https://isc.sans.edu/podcastdetail.html?id=6644, (Fri, Aug 30th)
I would like to cover today two different malware samples I spotted two days ago. They have one interesting behaviour in common: they compile their next stage on the fly directly on the&#;x26;#;xc2;&#;x26;#;xa0;victim&#;x26;#;39;s computer. At a first point, it seems weird but, after all, it’s an interesting approach to bypass low-level detection mechanisms that look for PE files.
Continue reading Malware Samples Compiling Their Next Stage on Premise, (Wed, Aug 28th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, August 29th 2019 https://isc.sans.edu/podcastdetail.html?id=6642, (Thu, Aug 29th)
[This is a guest diary submitted by Jan Kopriva. Jan is working for Alef Nula (http://www.alef.com) and you can follow him on Twitter at @jk0pr]
Continue reading [Guest Diary] Open Redirect: A Small But Very Common Vulnerability, (Wed, Aug 28th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, August 28th 2019 https://isc.sans.edu/podcastdetail.html?id=6640, (Wed, Aug 28th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, August 27th 2019 https://isc.sans.edu/podcastdetail.html?id=6638, (Tue, Aug 27th)