Security Affairs

OCTOBER 14, 2019

Technical Analysis. Hash 6125489453c1824da3e28a54708e7c77875e500dd82a59c96c1d1e5ee88dcad7 Threat Word document Dropper (Emotet) Brief Description First stage of Emotet campaign targeting organization with Security Operation Centers Ssdeep 6144:tkPNPASKUzSRnLx3Q4td9pB8LGme764XNNHBly:tkPNPAfUGRt3b3B8LGL6CNJ. SOC report 10 12 2019.doc

Computers and Electronics 80

Computers and Electronics Penetration Testing Malware Advertising 80

eSecurity Planet

MARCH 14, 2023

In this simple environment network security followed a simple protocol: Authenticate the user : using a computer login (username + password) Check the user’s permissions: using Active Directory or a similar Lightweight Directory Access Protocol (LDAP) Enable communication with authorized network resources (servers, printers, etc.)

Network Security 92

Network Security Firewall Penetration Testing Encryption 92

eSecurity Planet

FEBRUARY 3, 2021

A March 2020 software update of the SolarWinds Orion management platform gave malicious actors unhindered access to key government and enterprise networks. Brief timeline of findings. With access to DSInternals, the malware could query the AD servers and steal data, passwords, and keys. Cases showed malware added X.509

Software 62

Software Malware Authentication Penetration Testing 62

SecureList

SEPTEMBER 30, 2021

Download GhostEmperor’s technical details (PDF). Unfortunately, we did not manage to retrieve this executable, but we saw that the consecutive actions of loading it included the creation and execution of GhostEmperor scripts by wdichost.exe. The C++ variant, on the other hand, relies on hardcoded AES 256 encryption keys.

Malware 126

Malware Engineering Encryption Telecommunications 126

Cisco Security

AUGUST 26, 2022

At the RSA Conference 2022 earlier this year, Jeetu Patel, Cisco’s Executive Vice President and General Manager of Security and Collaboration, spoke of how the ‘cybersecurity poverty line’ is widening and how malicious actors are taking advantage of this gaping hole to unleash persistent attacks. Read more here. Read more here.

Firewall 120

Firewall Authentication Passwords Threat Detection 120

McAfee

AUGUST 24, 2021

CVE-2021-33885 – Insufficient Verification of Data Authenticity (CVSS 9.7). This paper is intended to bring an overview and some technical detail of the most critical attack chain along with addressing unique challenges faced by the medical industry. For a brief overview please see our summary blog here. Technical Debt.

Computers and Electronics 145

Computers and Electronics Authentication Software Risk 145

Cisco Security

AUGUST 28, 2023

XDR (eXtended Detection and Response) Integrations At Black Hat USA 2023, Cisco Secure was the official Mobile Device Management, DNS (Domain Name Service) and Malware Analysis Provider. Or, is from a briefing or a demo in the Business Hall? Typically, a CTB deployment requires a broker node and a manager node.

Wireless 63

Wireless DNS Mobile Technology 63

Vipre

JANUARY 22, 2021

While many employees are tasked with technical roles, few are cybersecurity experts. Discover shadow IT access to SaaS applications and apply whitelist or blacklist policies for access including granular application controls to manage application features. For more details on proxy issues, read this in-depth technical article: [link].

DNS 40

DNS Architecture Encryption Malware 40

SecureList

OCTOBER 19, 2021

Just like Dyre, its main functionality was initially the theft of online banking data. In this document, we decided to provide a brief description of the Trickbot modules. Technical details. Downloaded modules are encrypted, and can be decrypted with the Python script below. Trickbot was first discovered in October 2016.

Banking 136

Banking Passwords VPN Internet 136