SecureWorld News

JANUARY 10, 2024

A quick caveat is that I tried to do my testing while having a password manager as an extension in my browser (Mozilla Firefox). For me personally, I'll suffer the higher price tag for the YubiKey 5. I looked into trying these out with some more platforms, but, unsurprisingly, services that support security keys are still the minority.

Authentication 81

Authentication Password Management Passwords Mobile 81

Security Affairs

JULY 9, 2019

All the attacker need to do is to create an invite link through his account on the Zoom website and embed it on a website as an image tag or using an iFrame. Only the following links seem to be important: action=join confno=[whatever the conference number is]. Then he needs to trick the victims into visiting the malicious website.

Software 72

Software Advertising Hacking Accountability 72

Security Boulevard

OCTOBER 31, 2022

A trust store is a collection of root certificates that are trusted by default and are maintained by the companies that make operating systems and web browsers, such as Apple , Microsoft , Mozilla , and Google. Why the “Not Secure” Tag in Chrome 68 Makes Sense. These constraints might be a name, policy, and key usage. Related posts.

Encryption 52

Encryption Authentication Internet Internet 52

Troy Hunt

JULY 31, 2018

Is an HTTP 200 and a meta refresh tag or some funky JS sufficient? As you'll see from the Mozilla articles I linked to on those status codes, this has an impact on SEO. Meta refresh tags and client-side script are not "correct" implementations of redirects from insecure to secure schemes.

Accountability 126

Accountability Insurance Banking Media 126

SecureList

MARCH 31, 2022

Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/4.0 Write connections with unknown/unexpected msgID (request type) data to a log file, entries are tagged with ‘xxxxxxxx’ Attribution. POST /include/inc.asp HTTP/1.1 compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; NET4.0C; NET4.0E; InfoPath.3)

Malware 116

Malware Encryption Cryptocurrency Architecture 116

Malwarebytes

APRIL 6, 2021

Sample result: API calls tagged with TinyTracer. The name of the browser agent is also hardcoded, in obfuscated form: “ Mozilla/5.0 They can be also traced automatically at the execution time, i.e. with the help of TinyTracer. Communication with the C2. Windows NT 5.1)

Malware 121

Malware Phishing Passwords Architecture 121

CyberSecurity Insiders

FEBRUARY 25, 2022

ws, application data, $recycle.bin, mozilla, $windows.~bt, Alien Labs is tracking IOCs associated with the geo-political conflict in Eastern Europe, through tagged pulses that track incident and related threat intelligence. Directories: system volume information, intel, $windows.~ws,

Ransomware 119

Ransomware Encryption Malware Backups 119

SecureList

AUGUST 10, 2022

Accept: */* Referer: [link] Cookie: source=<encrypted blob>; User-Agent: Mozilla/5.0 sources: the DLL version is tagged as “heads/3.7-dirty” dirty” [1] (instead of “tags/v3.7.4” com'] user_agent_list = ['Mozilla/5.0 Safari/537.36', 'Mozilla/5.0 Safari/537.36', 'Mozilla/5.0

Cryptocurrency 87

Cryptocurrency Encryption Social Engineering Passwords 87

Troy Hunt

NOVEMBER 2, 2017

No, it's not, but that didn't stop Oil and Gas International from logging a bug report with Mozilla : Your notice of insecure password and/or log-in automatically appearing on the log-in for my website, Oil and Gas International is not wanted and was put there without our permission.

Passwords 202

Passwords Penetration Testing Technology Accountability 202

Troy Hunt

JUNE 30, 2022

Later in 2018, I did the same thing with the email address search feature used by Mozilla, 1Password and a handful of other paying subscribers. Every time this very blog loads Font Awesome from Cloudflare's CDN, for example, it's verified against the hash in the integrity attribute of the script tag (view source for yourself).

Passwords 308

Passwords Identity Theft Consumer Services Password Management 308

SecureList

OCTOBER 19, 2021

The module is capable of stealing data from the following applications: Git, TeamViewer, OpenSSH, OpenVPN, KeePass, Outlook, FileZilla, Internet Explorer, Mozilla Firefox, Google Chrome, Microsoft Edge, RDP, WinSCP, VNC, UltraVNC, RealVNC, TigerVNC, PuTTY, AnyConnect. It is also able to grab autofill information from web browsers. fscanDll32.

Banking 136

Banking Passwords VPN Internet 136

Security Boulevard

JUNE 15, 2023

Data stolen from the infected system is labeled with specific binary tags that identify the type of information when it is sent to the C2 server. This configuration is structured by 1’s and 0’s representing whether to enable or disable a feature, respectively. Trojan.Mystic.KV 123:13219 185.252.179[.]18:13219 18:13219 142.132.201[.]228:13219

Cryptocurrency 52

Cryptocurrency Password Management Malware DNS 52

Scary Beasts Security

MAY 20, 2009

Leaves the XML tag structure balanced, thanks to the repeating nature of the XML tree. As always, Mozilla security responded wonderfully to this advance in E4X theft. Assigns said string literal to a Javascript variable in the attacker's domain! There will be real-world services matching these constraints.

Banking 50

Banking 50