SANS ISC Diary - E-mail from Agent Tesla
· β 1 min read
A Diary of mine was published today on the SANS Internet Storm Center. In this one we take a look at a multi-stage downloader for Agent Tesla.
SANS
SANS ISC Diary - Analysis of a strangely poetic malware
· β 1 min read
A Diary of mine was published today on the SANS Internet Storm Center. In this one we take a look at a macro-based dropper sent to the Internet Storm Center by one of our readers.
SANS ISC Diary - Lessons learned from playing a willing phish
· β 1 min read
A Diary of mine was published today on the SANS Internet Storm Center. In this one we take a look at baiting phishing attackers and at some of the lessons we may learn from it.
SANS ISC Diary - Did the recent malicious BlueKeep campaign have any positive impact when it comes to patching?
· β 1 min read
A Diary of mine was published today on the SANS Internet Storm Center. If you wondered whether the recent 'BlueKeep worm scare' had any impact when it comes to the number of vulnerable systems out there, then this one is for you.
SANS ISC Diary - EML attachments in O365 - a recipe for phishing
· β 1 min read
A Diary of mine was published today on the SANS Internet Storm Center. In this one, we take a look at the absence of filtering of EML attachments in O365 and what it can lead to.
SANS ISC Diary - Phishing e-mail spoofing SPF-enabled domain
· β 1 min read
A Diary of mine was published today on the SANS Internet Storm Center. In this one, we take a look at SPF and when even SPF-enabled domains may be spoofed.
SANS ISC Diary - Tricky LNK points to TrickBot
· β 1 min read
A Guest Diary of mine was published today on the SANS Internet Storm Center. In this one, we take a look at analyzing a malicious LNK file which leads us to a sample of Trickbot.
SANS ISC Diary - Open Redirect: A Small But Very Common Vulnerability
· β 1 min read
A Guest Diary of mine was published today on the SANS Internet Storm Center. In this one, I discuss open redirect vulnerabilities and how to find them. If you’ve never heard of open redirects, this might be a useful introductory text.
SANS ISC Diary - The good, the bad and the non-functional
· β 1 min read
A Guest Diary of mine was published today on the SANS Internet Storm Center. If you’ve wondered how do the less usual cyber attacks look, it might be worth a read…