DecryptedTech Feed (3739)
Meta works to add security to messenger that should have been there
Posted on Friday, 28 January 2022
in
Security Talk
Written by
Sean Kalinich
Metabook has announced some new security features in their messenger app and platform. Many of these are items that competing SMS/MMS applications and services already have, but Meta knows that they need are now facing some solid competition, so they…
Read 509 times
Facboo…We mean Meta Rebrands the Oculus
Posted on Friday, 28 January 2022
in
In Other News
Written by
Sean Kalinich
What’s in a name? Well, quite a bit really. The name of something can be the make or break for a product in many instances. When Facebook decided to rebrand themselves as Meta, most people though it was both presumptuous…
Read 1477 times
Phishing Campaign Leverages New Technique to Evade Detection
Posted on Thursday, 27 January 2022
in
Security Talk
Written by
Sean Kalinich
Researchers at Morphisec have detailed a new delivery type for AsyncRAT (Remote Access Trojan) used in part of a phishing campaign that has been running since at least September 2021. The phishing part of the campaign is routine, an email…
Read 539 times
IAG Prophet Spider Targeting VMWare Horizon Servers Via Log4J Vulnerability
Posted on Wednesday, 26 January 2022
in
Security Talk
Written by
Sean Kalinich
A shell for me, a shell for you, a shell for everybody in the room. If you have not heard about Log4J and the associated vulnerabilities in versions between 2.0 and 2.16 you might have not been near a computer…
Read 503 times
Bug in Safari Used in Watering Hole attack on macOS devices in Asia.
Posted on Wednesday, 26 January 2022
in
Security Talk
Written by
Sean Kalinich
When you are hunting, finding out where your target frequents and laying in wait is an often-used tactic. If your information is good, you are going to have a successful hunt. The same is true in cybersecurity, both from an…
Read 455 times
12 Year Old Linux vulnerability Allows Root on Every Major Linux Flavor
Posted on Wednesday, 26 January 2022
in
Security Talk
Written by
Sean Kalinich
A newly released CVE (common vulnerabilities and exposures) CVE-2021-4034 for Linux has identified a vulnerability in PolKit’s (formerly PolicyKit) pkexe that exists in very major release of Linux. The vulnerability known as PwnKit can be exploited to gain full root…
Read 936 times
NFTs become part of scams as they rise in popularity but remain misunderstood.
Posted on Tuesday, 25 January 2022
in
Security Talk
Written by
Sean Kalinich
The NFT or Non-Fungible Token is becoming a rather big deal in circles where blockchain and cryptocurrency are popular. The NFT, as designed, is supposed to represent ownership, or the chain of ownership back to the original creator. However, as…
Read 721 times
.NET Packer, DTPacker Acts Like a Packer and Downloader with an Odd Password
Posted on Tuesday, 25 January 2022
in
Security Talk
Written by
Sean Kalinich
Malware delivery and distribution techniques always changing. As blue teams develop an understanding of one type of attack, the attackers shift to something different. Security researchers and security teams follow (or should follow) these methods so they can shift defensive…
Read 411 times
As Data Compromises Rise will Companies Change Practices to Meet Them?
Posted on Tuesday, 25 January 2022
in
Security Talk
Written by
Sean Kalinich
The latest report from the ITRC (Identity Theft Resource Center) has been released and it shows us some sadly unsurprising data. According to the report, 2021 data compromises are up 68% (1,862) compared to 2020 numbers and 23% higher than…
Read 418 times
Google Claims a Court Ruling will Make Them Act as Something They Already Are, A Censor
Posted on Monday, 24 January 2022
in
My Ramblings
Written by
Sean Kalinich
Irony is a funny thing especially when it is so blatantly obvious as in our example today. Google, owners of YouTube, Adsense and many other internet properties. Google has a history of policing content they do not agree with going…
Read 703 times
Another Day, Another Cloud Storage Campaign from the Molerats APT TA402
Posted on Monday, 24 January 2022
in
Security Talk
Written by
Sean Kalinich
Dropbox, Google Docs and other cloud storage services are great tools for collaboration and to ensure that your files are kept, relatively, safe. These services can also be used by attackers with the right setup and files. The APT group…
Read 646 times
Emotet Leveraging Excel 4.0 Macros and Unconventional IP Addressing
Posted on Monday, 24 January 2022
in
Security Talk
Written by
Sean Kalinich
In a list of things that should be killed with fire, Excel 4.0 Macros are high up. However, the fat that Spamming “services” like Emotet are still using Excel 4.0 Macros tells me that some are not getting the hint.…
Read 813 times
Dark Souls has a Serious Remote Code Execution Bug During Online Play
Posted on Sunday, 23 January 2022
in
Security Talk
Written by
Sean Kalinich
Online gaming is pretty much the way game developers want to go these days. However, online modes come with risks. With Arner Bros. Games it was Back 4 Blood’s online only progression created such a massive backlash they had to…
Read 1022 times
More Than a Month After Being Hit by Ransomware Kronos is Still Down
Posted on Friday, 21 January 2022
in
Security Talk
Written by
Sean Kalinich
The Ultimate Kronos Group was the target of a Ransomware attack in Late 2021 coincidentally at the same time the Log4Shell vulnerability was disclosed. Kronos has not disclosed how the ransomware got into their environment, nor has it been revealed…
Read 2257 times
MoonBounce UEFI Malware linked to APT41 by Kaspersky Researchers
Posted on Friday, 21 January 2022
in
Security Talk
Written by
Sean Kalinich
APT group 41 also known as Winnti has been tied to a wonderful new piece of malware that does not infect your operating system, but the UEFI firmware on your device. The malware in question has been dubbed MoonBounce by…
Read 589 times
White House Issues Memo to NSA and DoD to Improve Security
Posted on Thursday, 20 January 2022
in
My Ramblings
Written by
Sean Kalinich
It is no secret that the NSA and DoD (Department of Defense) and other Government agencies have an issue with security. Over the last few years their security has been about as effect as using a sieve to carry water.…
Read 448 times