Collaborate Disseminate
We have released CorSigs version 4.48 for Trustwave Web Application Firewall (WAF) versions 7.6, 8.0 and 8.5. The purpose of these rules is to detect attack sequences or classes of attacks on a web application and its components. Release Summary…
Continue reading Trustwave Web Application Firewall Signature Update 4.48 Now Available
Albert Einstein once said, “Out of Complexity, Find Simplicity” but it also seems that simplicity is always related to a puzzle of complexity. This statement also applies to the Microsoft’s Dynamic Data Exchange (DDE) protocol vulnerability exploit whi… Continue reading The Complexity amidst Simplicity: Exploiting the MS Office DDE Feature
Some time ago, a person reached out to Trustwave to get answers regarding some news that he saw about Steganography. After this, I noticed that not many people understand what steganography is and the risks it presents for companies. In…
Continue reading An Easy Introduction to Steganography
Authors: Dr. Fahim Abbasi, Nicholas Ramos, Rodel Mendrez and Gerald Carsula In our previous blog we highlighted how a group of scammers were targeting financial software customers by spamming out Microsoft Sharepoint URLs that lead the target to fake i… Continue reading Fake Power and Broadband Utility Bills serve Banking Trojans to Aussies
We have recently released new commercial rules for ModSecurity Web Application Firewall (WAF) v2.9 and above. These rules’ purpose is to protect against new emerging attacks that target vulnerabilities in public software. For this release we are highli… Continue reading ModSecurity Web Application Firewall – Commercial Rules Update(4)
What’s worse than annoying ads on a website? Crypto Miner on a website! Over the last couple of weeks there has been a lot of talk about Coinhive, a service that claims to provide an alternative to advertising for monetizing…
Continue reading “Don’t Mine Me” – Coinhive
Authors: Dr. Fahim Abbasi, Gerald Carsula and Rodel Mendrez Scam Overview Her Majesty’s Revenue & Customs (HMRC) is the UK department responsible for collecting taxes and other tax related services like VAT returns. On 6th September, 2017, scammers launched a… Continue reading VAT Return with a Vengeance
What’s worse than annoying ads on a website? Crypto Miner on a website! Over the last couple of weeks there has been a lot of talk about Coinhive, a service that claims to provide an alternative to advertising for monetizing…
Continue reading “Don’t Mine Me” – Coinhive
It’s that time of year where the seasons are changing. The Northern Hemisphere moves into Autumn, and the Southern Hemisphere moves to Spring. So it is with Locky. As we discussed in our last post, spam campaigns were downloading Locky…
Continue reading Locky Part 2: As the Seasons Change so is Locky
Back in August 2017, Trustwave Spiderlabs reported a spam campaign that distributed a new Locky variant called “diablo.” As predicted that incident was just a primer for a much bigger campaign and indeed just a few weeks later a new…
Continue reading Locky Part 1: Lukitus Spam Campaigns and Their Love for Game of Thrones