From a Regular Infostealer to its Obfuscated Version, (Sat, Nov 30th) 2024-11-30 14:48:43 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu stealer remnux trap infostealer 20241125

Quickie: Mass BASE64 Decoding, (Fri, Nov 29th) I was asked how one can decode a bunch of BASE64 encoded IOCs with my tools.I'm going to illustra... 2024-11-29 13:38:37 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu decoded phishing newline didier base64dump

SANS ISC Internship Setup: AWS DShield Sensor + DShield SIEM [Guest Diary], (Tue, Nov 26th) [This is a Guest Diary by John Paul Zaguirre , an ISC intern as part of the SANS.edu BACS program]... 2024-11-28 09:52:48 | 阅读: 4 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu dshield sensor machine isc software

ISC Stormcast For Wednesday, November 27th, 2024 https://isc.sans.edu/podcastdetail/9234, (Wed, Nov 27th) 2024-11-27 10:0:2 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security papers isc feeds

[Guest Diary] Using Zeek, Snort, and Grafana to Detect Crypto Mining Malware, (Tue, Nov 26th) [This is a Guest Diary by David Fitzmaurice, an ISC intern as part of the SANS.edu Bachelor's Degre... 2024-11-27 04:7:54 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu network redtail snort zeek ssh

ISC Stormcast For Tuesday, November 26th, 2024 https://isc.sans.edu/podcastdetail/9232, (Tue, Nov 26th) 2024-11-26 10:0:2 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu feeds 18th isc papers

The strange case of disappearing Russian servers, (Mon, Nov 25th) Few months ago, I noticed that something strange was happening with the number of servers seen by S... 2024-11-25 21:34:45 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu russia decrease isps cwmp suddenly

Quick & Dirty Obfuscated JavaScript Analysis, (Sun, Nov 24th) As mentioned in diary entry "Increase In Phishing SVG Attachments", I have a phishing SVG sample wi... 2024-11-24 17:22:41 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu phishing network developer analysis

Decrypting a PDF With a User Password, (Sat, Nov 23rd) In diary entry "Analyzing an Encrypted Phishing PDF", I decrypted a phishing PDF document. Because... 2024-11-24 01:6:46 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu phishing qpdf pdfid didier suitable

Wireshark 4.4.2 Released, (Sat, Nov 23rd) Published: 2024-11-23. Last Updated: 2024-11-23 12:42:31 UTCby Didier Stevens (Version: 1)Wiresh... 2024-11-23 20:42:31 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu didier stevens senior

An Infostealer Searching for « BIP-0039 » Data, (Fri, Nov 22nd) I like obfuscation techniques implemented by malware developers. If their primary purpose is to d... 2024-11-22 11:58:3 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu mnemonic ups bip phrase 0039

ISC Stormcast For Friday, November 22nd, 2024 https://isc.sans.edu/podcastdetail/9230, (Fri, Nov 22nd) 2024-11-22 10:0:2 | 阅读: 3 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 13th papers security feeds

ISC Stormcast For Thursday, November 21st, 2024 https://isc.sans.edu/podcastdetail/9228, (Thu, Nov 21st) 2024-11-21 16:50:4 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security feeds papers 18th

Increase In Phishing SVG Attachments, (Thu, Nov 21st) There is an increase in SVG attachments used in phishing emails (Scalable Vector Graphics, an XML-b... 2024-11-21 11:26:19 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu microsoft phishing blurry hardcoded stevens

ISC Stormcast For Wednesday, November 20th, 2024 https://isc.sans.edu/podcastdetail/9226, (Wed, Nov 20th) ISC Stormcast For Wednesday, November 20th, 2024 https://isc.sans.edu/podcastdetail/9226... 2024-11-20 10:45:6 | 阅读: 2 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc wednesday 20th 9226

Apple Fixes Two Exploited Vulnerabilities, (Tue, Nov 19th) Today, Apple released updates patching two vulnerabilities that have already been exploited. Intere... 2024-11-20 05:56:52 | 阅读: 6 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu malicious exploited attacker

Detecting the Presence of a Debugger in Linux, (Tue, Nov 19th) Hello from Singapore where I'm with Johannes and Yee! This week, I'm teaching FOR710[1]. I spotted... 2024-11-19 13:12:58 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 352 windows tracerpid xavier

ISC Stormcast For Tuesday, November 19th, 2024 https://isc.sans.edu/podcastdetail/9224, (Tue, Nov 19th) 2024-11-19 10:0:1 | 阅读: 1 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security feeds 18th papers 13th

Exploit attempts for unpatched Citrix vulnerability, (Mon, Nov 18th) Last week, Watchtowr Labs released details describing a new and so far unpatched vulnerability in C... 2024-11-18 13:59:56 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu neutral msmq mscorlib

ISC Stormcast For Monday, November 18th, 2024 https://isc.sans.edu/podcastdetail/9222, (Mon, Nov 18th) 2024-11-18 10:0:2 | 阅读: 0 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu security 18th isc 13th papers