Posts

SANS ISC Diary - It appears that the number of industrial devices accessible from the internet has risen by 30 thousand over the past three years

📅 Apr 22, 2024 · ☕ 1 min read

A new Diary of mine was published today on the SANS Internet Storm Center website. In this one, we’ll take a look at the number of internet-exposed industrial control systems…

SANS ISC Diary - The xz-utils backdoor in security advisories by national CSIRTs

📅 Apr 1, 2024 · ☕ 1 min read

A new Diary of mine was published today on the SANS Internet Storm Center website. In this one, we’ll take a look at the number of security advisories published by national and governmental CSIRTs in connection with the backdoor in xz-utils…

SANS ISC Diary - Increase in the number of phishing messages pointing to IPFS and to R2 buckets

📅 Mar 14, 2024 · ☕ 1 min read

A new Diary of mine was published today on the SANS Internet Storm Center website. In this one, we’ll take a look at a recent rise in the number of phishing messages pointing to IPFS and R2 buckets…

Actively exploited open redirect in Google Web Light

📅 Feb 26, 2024 · ☕ 9 min read

An open redirect vulnerability exists in the remains of Google Web Light service, which is being actively exploited in multiple phishing campaigns. Google decided not to fix it, so it might be advisable to block access to the Web Light domain in corporate environments...

SANS ISC Diary - Phishing pages hosted on archive.org

📅 Feb 21, 2024 · ☕ 1 min read

A new Diary of mine was published today on the SANS Internet Storm Center website. In this one, we’ll take a look at hosting of phishing pages on archive.org…

SANS ISC Diary - Computer viruses are celebrating their 40th birthday (well, 54th, really)

📅 Feb 6, 2024 · ☕ 1 min read

A new Diary of mine was published today on the SANS Internet Storm Center website. In this one, we’ll take a look at an interesting anniversary related to computer viruses…

SANS ISC Diary - Interesting large and small malspam attachments from 2023

📅 Jan 3, 2024 · ☕ 1 min read

A new Diary of mine was published today on the SANS Internet Storm Center website. In this one, we’ll take a look at the largest and smallest malware samples, that my malspam traps caught last year…

SANS ISC Diary - Whose packet is it anyway: a new RFC for attribution of internet probes

📅 Dec 6, 2023 · ☕ 1 min read

A new Diary of mine was published today on the SANS Internet Storm Center website. In this one, we’ll take a look at a recently published RFC which provides way for network scans performed over the internet to be attributed…

SANS ISC Diary - Phishing page with trivial anti-analysis features

📅 Nov 17, 2023 · ☕ 1 min read

A new Diary of mine was published today on the SANS Internet Storm Center website. In this one, we’ll take a look at a phishing page with easily bypassed anti-analysis features…

SANS ISC Diary - Are typos still relevant as an indicator of phishing?

📅 Oct 16, 2023 · ☕ 1 min read

A new Diary of mine was published today on the SANS Internet Storm Center website. In this one, we’ll discuss whether typos are still useful as an indicator of phishing…