SANS ISC Archives - Page 33 of 35

[SANS ISC Diary] Example of Targeted Attack Through a Proxy PAC File

August 25, 2016 Malware, SANS Internet Storm Center, Security 12 comments

I published the following diary on isc.sans.org: “Example of Targeted Attack Through a Proxy PAC File“. Yesterday, I discovered a nice example of targeted attack against a Brazilian bank. It started with an email sample like this …Â [Read more]

[SANS ISC Diary] Voice Message Notifications Deliver Ransomware

August 23, 2016 Malware, SANS Internet Storm Center, Security 5 comments

I published the following diary on isc.sans.org: “Voice Message Notifications Deliver Ransomware“. Bad guys need to constantly find new ways to lure their victims. If billing notifications were very common for a while, not all people in a company are working with such kind of documents. Which types of notification

[SANS ISC Diary] Data Classification For the Masses

August 19, 2016 SANS Internet Storm Center, Security One comment

I published the following diary on isc.sans.org: “Data Classification For the Masses“. Data classification isnâ€™t a brand new topic. For a long time, international organizations or military are doing “data classificationâ€. It can be defined as: â€œA set of processes and tools to help the organization to know what data

[SANS ISC Diary] Analyze of a Linux botnet client source code

July 27, 2016 SANS Internet Storm Center, Security 12 comments

I published the following diary on isc.sans.org: “Analyze of a Linux botnet client source code“. I like to play active-defense. Every day, I extract attacker’s IP addresses from my SSH honeypots and performÂ a quick Nmap scan against them. The goal is to gain more knowledge about the compromised hosts. Most

[SANS ISC Diary] Name All the Things!

July 15, 2016 SANS Internet Storm Center, Security Leave a comment

I published the following diary on isc.sans.org: “Name All the Things!“. With our more and more complex environments and processes, we have to handle a huge amount of information on a daily basis. To improve the communication with our colleagues, peers, it is mandatory to speak the same language and

[SANS ISC Diary] The Power of Web Shells

July 14, 2016 SANS Internet Storm Center 2 comments

I published the following diary on isc.sans.org: “The Power of Web Shells“. Web shellsÂ are not new in the threats landscape. A web shell is a script (written in PHP, ASL, Perl, … – depending on the available environment) that can be uploaded to a web server to enable remote administration.

[SANS ISC Diary] Hunting for Malicious Files with MISP + OSSEC

July 13, 2016 OSSEC, SANS Internet Storm Center, Security 4 comments

I published the following diary on isc.sans.org: Hunting for Malicious Files with MISP + OSSEC.

[SANS ISC Diary] Phishing Campaign with Blurred Images

June 30, 2016 SANS Internet Storm Center, Security Leave a comment

I published the following diary was published on isc.sans.org: Phishing Campaign with Blurred Images.

$HOME Sweet $HOME – SANSFIRE Edition

June 16, 2016 SANS Internet Storm Center, Security Leave a comment

I’m in Washington DC atÂ the SANSFIRE event. I’m following a training and meeting fellow SANS ISC Handlers. I also gave a talk tonight about the risks of the Internet of Things and quick tips to protect your home network against their invasion. Here is a copy of the slides: Link:Â http://www.slideshare.net/xme/home-sweet-home-sansfire-edition.