Safe2day.dk

What a paradox. Mailcatch.com - A anti-mailspam service provider is being abused by cybercriminals to send blackmail spam. "The ultimate anti-spam service!" It says on their website. Well... a two-edged spam-sword would be a better description, I think.

English version of my article today about one of the biggest misconceptions regarding IT-security amongst private citizens and some smal to medium size companies. linkedin.com/pulse/im-sorry…

Har du en Microsoft Exchange server? Selvom du fik den patchet korrekt i starten af ugen, kan det være en god ide at få tjekket dine systemer med det samme. Hvis du først opdager, at du fik besøg om 6-9 måneder, kan omkostningen blive mange gange højere. krebsonsecurity.com/2021/03/at-lea…

Har du opdaget Chrome's nye sikkerhedsknap? Hvis du ikke har, så følg med her. Den hjælper dig med at blive mere sikker på nettet. safe2day.dk/Chrome-sikkerh…

Malwaren "Android Worm" spreder sig via WhatsApp. Stjæler data og/eller lukker brugerens konto. ehackingnews.com/2021/01/androi…

@peterkruse En meget trist udvikling, som kun bliver værre, medmindre man konsekvent undlader at betale og i stedet satser mere på proaktive strategier.

For my Danish followers: Cyberkriminelle har fået et nyt våben - og det virker: Derfor vælger mange flere hackede virksomheder at betale hackerne, computerworld.dk/art/255054/cyb…

DK - SCAM with postnord.com domain spoofing. Postnord with a DMARC p=none in 2021 is not recommend. spf=softfail (sender IP is 167.71.56.211)<-spoof ip SCAM urls /allhere2020.myshopify.com/kjhg /allhere2020.myshopify.com/jjlllh /storage.googleapis.com/golbweb/jj.html

The following IP's is used to spoof postnord.com DigitalOcean 142.93.105.137 159.89.14.112 167.71.56.95 167.71.56.119 167.71.56.211 @postnorddk

The Centre for Cybersecurity Belgium (CCB) presents its third online Quarterly Cyber Threat Report event (QCTR). app.livestorm.co/ccb/centre-for…

NTFS VULNERABILITY CRITICALITY UNDERESTIMATED - There is a specially nasty vulnerability in NTFS right now. Triggerable by opening special crafted name in any folder anywhere.' The vulnerability will instant pop up complaining about yuor harddrive is corrupted when path is opened

For my Danish followers: Der laves blackhat SEO via Google, hvor søgninger på f.eks. support til ransomware, leder mod websider der lokker med konkurrencer og endeligt abonnementsaftaler og kreditkort phishing. Så pas på derude. Et problem kan hurtigt blive til flere!

Interesting sample of ELF variant of #Winnti (based on a fork of Azazel user-mode rootkit) uploaded yesterday in VT. Have the same decrypt algorithm and function for hide by pid and sockets but use the rest of functions of Azazel rootkit for the current operations.

Watcher - Open Source Cybersecurity Threat Hunting Platform dlvr.it/Rq2fJH #Django #IncidentResponse #PythonTlsh #ReactJS

If solarwinds could do it - we can do it too... zdnet.com/article/nissan…

We've just updated the Top 10 Hacking Techniques of 2020 candidate list with 13 new community nominations! Thanks for the support so far, keep them coming! portswigger.net/research/top-1…

For my Danish followers: Den samme person, der tidligere har misbrugt #covid19 som lokkemad, er tilbage med en #smishing kampagne, hvor ofre skal lokkes til at indtaste #NemID brugernavn/password og uploade en kopi af nøglekort via en #phishing side. @NetsDanmark @Rigspoliti_NC3

@radukn Down

SCADA Security is out! news.scada-security.ro #cybersecurity #security