Clik here to view.
Dyre and Upatre Under Constant Development
IntroductionThe Dyre trojan (aka Dyreza, Battdil) is actively developed malware employed by actors that seek to steal login credentials used to access the online banking websites of financial...
View ArticleClik here to view.
Suricata Training Dates Announced
OISF has 2 training dates announced, and more to come! The first is in parallel with Black Hat Amsterdam 2014. Just a few weeks away. If you're attending BH please consider attending Suricata training...
View ArticleClik here to view.
ScarePakage - Fake FBI RansomLocker
A RansomLocker Android application dubbed ScarePakage was brought to our attention by an article from Lookout, so we decided to dig into the malicious app to discover if it has any network-based IOCs,...
View ArticleClik here to view.
Bot of the Day: Sharik
We recently came across a sample that exhibited interesting behavior in plaintext, which makes our job a lot easier when writing signatures. We’re going to briefly walk through our basic analysis...
View ArticleClik here to view.
Are You on “Target” For a Security Breach?
IT security professionals should be asking themselves that all the time. As we are all aware of the Target Stores compromise, these types of attacks occur every second of every day throughout the...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/02/13
[***] Summary: [***] 4 new Open rules. 8 new Pro rules (4/4). Upatre, Dridex, Gulcrypt, MultiPlug, etc. Thanks @EKWatcher, Kevin Ross. [+++] Added rules: [+++] Open: 2020419 – ET CURRENT_EVENTS Upatre...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/02/12
[***] Summary: [***] 6 new Open rules. 15 new Pro rules (6/9). Upatre,Golroted,Predator Pain,Tinba,I2P etc. Tks @c_APT_ure, Kevin Ross, @EKwatcher, Nathan Fowler, @kafeine, Mike Worth. [+++] Added...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/02/11
[***] Summary: [***] 14 new Open rules. 25 New Pro (14/11) .onion Proxy, CVE-2014-6041, HawkEye FTP, etc. Thanks @kafeine, Kevin Ross, @rmkml, @c_apt_ure [+++] Added rules: [+++] Open: 2020396 – ET...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/02/10
[***] Summary: [***]6 new Open signatures, 65 new Pro (6 + 59). Patch Tuesday, KaiXin, Bredolap/Rebhip/Bifrose, PassGrabber Keylogger.Thanks: C.L. Martinez, @EKWatcher, @rmkml and @sempersecurus.Check...
View ArticleClik here to view.
Febuary 2015 Patch Tuesday Coverage
BulletinCVETitleNotesET Pro CoverageMS15-0092014-8967Internet Explorer Memory Corruption VulnerabilityExploit Code Likely2809716,2809717MS15-0092015-0017Internet Explorer Memory Corruption...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/02/09
[***] Summary: [***]1 new Open signatures, 14 new Pro (1 + 13). Filecoder Locker, Critroni/CTB, WordPress Pagelines RCE.Thanks: @EKWatcher[+++] Added rules: [+++]Open:2020386 – ET POLICY SUSPICIOUS...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/02/06
[***] Summary: [***]11 new Open signatures, 14 new Pro (11 + 3). Deep Panda, Skeleton Key, Zemot, Pragyan CMS SQLi.Thanks: Kevin Ross, Jake Warren, @sempersecurus & @EKWatcher.[+++] Added rules:...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/02/05
[***] Summary: [***]6 new Open signatures, 21 new Pro (6 + 15). Critroni/CTB, Upatre, DEEP PANDA, HP Data Protector RCE.Thanks: pckthck, @jaimeblascob, @EKWatcher and @abuse_ch.[+++] Added rules:...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/02/04
[***] Summary: [***]7 new Open signatures, 19 new Pro. Critroni/CTB locker, Operation Pawn Storm, ZeroCMS SQLi.[+++] Added rules: [+++] Open:2020357 – ET TROJAN Critroni Variant .onion Proxy Domain...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/02/03
[***] Summary: [***]5 new Open signatures, 16 new Pro (5 + 11). Android/SMSThief.F, IE same origin bypass (CVE-2015-0072).Thanks: James Lay, Kevin Ross and @EKWatcher.[+++] Added rules:...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/02/02
[***] Summary: [***]5 new Open signatures, 12 new Pro (5 + 7). PlugX, Sekur, NexusTaco (CVE-2014-3341), ArcDoor.Thanks: @ryancmoon, @Shadowserver, @rmkml, @kafeine and @malwaresigs[+++] Added rules:...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/01/30
[***] Summary: [***]9 new Open signatures, 22 new Pro (9 + 13). Cirtoni/CTB, f0xy, MSIL/Agent.PYO.Thanks: Pierre Schweitzer and @kafeine. [+++] Added rules: [+++]Open:2020333 – ET TROJAN MSIL/Agent.PYO...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/01/29
[***] Summary: [***]4 new Open, 22 new Pro signatures (4 + 18). D-Link DSL-2740R vuln, SiR-DoOoM, KJw0rm, Citroni/CTB Locker, Kakfum.Thanks: Eoin Miller, Wbbigdave, @rmkml, @abuse_ch, and...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/01/28
[***] Summary: [***]9 new Open sigs, 32 new Pro (9 + 23). Job314/Neutrino, CVE-2015-0235 Exim vuln, WordPress PingBack GHOST.Thanks:Pierre Schweitzer, Kevin Ross, @abuse_ch, and UT Austin Information...
View ArticleClik here to view.
Daily Ruleset Update Summary 2015/01/27
[***] Summary: [***]2 new Open signatures, 11 new Pro (2 + 9). FerretCMS SQLi, SmartCMS SQLi, CVE-2015-0235 Exim buffer overflow.Thanks: @rmkml[+++] Added rules: [+++]Open:2020315 – ET TROJAN KL-Remote...
View Article![BLACKPINK – DEADLINE – EP [iTunes Plus M4A]](http://is1-ssl.mzstatic.com/image/thumb/Video211/v4/de/b3/b1/deb3b1d4-ba28-22e8-2428-ef97617b2a4b/90d54d743002a6d66308f217cd867947_Preview_Image_Intermediate_nonvideo_sdr_426725135_2574858051.png/316x316bb.webp)
