Macro-based self-replicating malware, which basically allows a macro to write more macros, is not new among hackers, but to prevent such threats, Microsoft has already introduced a security mechanism in MS Office that by default limits this functionality.
— the.Fischerman.ch
(@FischermanCH)
Laut einer Studie bringen fast 500 der 50.000 am häufigsten besuchten Websites Software zum Einsatz, die Tastatureingaben und Mausbewegungen ihrer Nutzer aufzeichnet.
(@FischermanCH)
Der chinesische Drohnenhersteller DJI startete vor kurzem ein Bug-Bounty-Programm, woraufhin sich der Sicherheitsexperte Kevin Finisterre auf die Suche nach Sicherheitslücken machte machte. Er wurde recht schnell fündig und deckte eine Schwachstelle auf, die es Angreifern erlaubte, hochsensible Kundendaten von den DJI-Servern abzugreifen. Darunter waren auch Flug-Logs von Konten, die Regierungen und Militär nahe stehen.
(@FischermanCH)
In recent weeks, Unit 42 has discovered three documents crafted to exploit the InPage program. InPage is a word processor program that supports languages such as Urdu, Persian, Pashto, and Arabic. The three InPage exploit files are linked through their use of very similar shellcode, which suggests that either the same actor is behind these attacks, or the attackers have access to a shared builder. The documents were found to drop the following malware families:
(@FischermanCH)
Recently, we observed a new version of the Clayslide delivery document used to install a new custom Trojan whose developer calls it “ALMA Communicator”. The delivery document also saved the post-exploitation credential harvesting tool known as Mimikatz, which we believe the threat actors will use to gather account credentials from the compromised system. While we do not have detailed telemetry, we have reason to believe this attack targeted an individual at a public utilities company in the Middle East.
(@FischermanCH)
Loading ...| IP Address | 216.73.217.108 |
| Platform | |
| Cookie Enabled | |
| Browser Name | |
| Browser Version | |
| Browser Language | |
| Java Enabled | |
| Screen Width | |
| Screen Height |
Und...wetsch das Cookie ha öder nöd ?
And...do you want the cookie or not ?