Collaborate Disseminate
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, August 27th 2019 https://isc.sans.edu/podcastdetail.html?id=6638, (Tue, Aug 27th)
This started as a quick twitter conversation with Michael Vance (@Mav_Sec):
Continue reading Is it Safe to Require TLS 1.2 for E-Mail, (Mon, Aug 26th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, August 26th 2019 https://isc.sans.edu/podcastdetail.html?id=6636, (Mon, Aug 26th)
I recently was reading an article about Cyber Insurance and got intrigue on the type of coverage offered. Recovering from a Cyber attack can be very expensive and cyber security insurance offers the ability to transfer some of the risks to an insurance company. Some estimates that 1 in 3 company currently have cyber insurance. Then I found this presentation [2] that identified 10 misconceptions about Cyber insurance and provided an answer about each of them. I found very interesting the #1 Objection “We outsource our IT Services” and one of the 3 answers is even if the data is outsourced, “Legal responsibility CANNOT be transferred by contract”, it is the data the company has been entrusted to protect.
Continue reading Are there any Advantages of Buying Cyber Security Insurance?, (Sun, Aug 25th)
Let&#;x26;#;xe2;&#;x26;#;x80;&#;x26;#;x99;s review a malware sample that I spotted a few days ago. I found it interesting because it&#;x26;#;39;s not using deep techniques to infect its victims. The initial sample is a malicious VBScript. For a few weeks, I started to hunt for more Powershell based on encoded directives. The following regular expression matched on the file:
Continue reading Simple Mimikatz & RDPWrapper Dropper, (Thu, Aug 22nd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Friday, August 23rd 2019 https://isc.sans.edu/podcastdetail.html?id=6634, (Fri, Aug 23rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Thursday, August 22nd 2019 https://isc.sans.edu/podcastdetail.html?id=6632, (Thu, Aug 22nd)
Continue reading KAPE: Kroll Artifact Parser and Extractor, (Wed, Aug 21st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, August 21st 2019 https://isc.sans.edu/podcastdetail.html?id=6630, (Wed, Aug 21st)
A new variant of the information stealer Guildma (aka Astaroth) we analyzed last week is accessing Facebook and YouTube to get a fresh list of its C2 servers. The C2 list is encrypted and hosted in two Facebook and three YouTube profiles maintained and constantly updated by the cybercriminals.