John Harrison

2024-04-15 (Monday): #ContactForms campaign pushing #SSLoad malware as early as Thursday, 2024-04-11. List of indicators available at bit.ly/49Cz1kL #Wirshark #Unit42ThreatIntel #TimelyThreatIntel #InfectionTraffic

Ugh. Another ransomware attack. #ransomware

We just finished processing or in other words we just "Slash & Grabbed" this amazing report from @HuntressLabs team. Made some updates and added some new Sigma rules. But fortunately a lot of it was already covered by old generic rules. Here is a quick thread on every Sigma rules from @sigma_hq you can use to catch things mentioned in this 💎report

@jamessun Feel free to to dm

@drdriveby @EarthLink Glad to hear your email situation was resolved. I *still* use a Mindspring email account and every few months it gets hijacked. Would like to DM you to discuss how your situation may be similar to mine.

Successful resolution with my email situation! Thank you @EarthLink

@fusepark @EarthLink Day 11. Someone is “looking into it” 🤦‍♂️. #supportfail

@drdriveby @EarthLink I'm on day three with @EarthLink over here. Did you ever get your email back?

7 days and counting with no email during account takeover. 3 emails to executive customer support. 7 calls to customer support. Still no email. #fail thanks @EarthLink #customersupportfail

10 days and counting. No emails returned from my corporate email. 56 minutes on hold this call. 6 hours invested so far. Nice job @EarthLink #customersupportfail

@EarthLink dm is available

@drdriveby Good Afternoon, John. I am very sorry we are taking so long to get things back up and running for you. I'd like to look into this further and see if there's anything I can do to help. I'll contact you in a direct message for further assistance.- Nelson, EarthLink

Nicely said @cyb3rops !

This is hilarious! Is this your neighbor!? #wifi #Neighbours

@cyb3rops We still see this all the time! Great suggestions!

Don't expose your VMware, RDP, Confluence, firewall management interface and TeamCity server to the Internet I think the main reason you don't see this in best practice guides is because it's so obvious It's like telling people "Do not put pets in the microwave to dry them"

Largest operator of car dealerships in Australia and New Zealand impacted by #ransomware attacks.😞. #CyberSecurity

Nice overview and summary from @CeciliaZin ! This should be very interesting to watch! I wonder what @kevinroose and @CaseyNewton think about it! Hardfork episode time! #hardforkpodcast #chatgpt4

Wow .

@joff_thyer Pcap or it isn’t real.

City strapped unlabeled pelican case to telephone pole at end of my driveway. Trying to resist urge to pick the lock....

How’s your day going?! #itsupport #bootdisk #computerfail

Cybersecurity expert here: no. The stories of teenage hacking are sensationalized. As far as we can tell, he didn't hack into the company using a FireTV stick. He accessed the company using his phone. Specifically, he connected his phone to the TV and its bluetooth keyboard, through the FireTV stick. This made things more convenient when accessing the Internet from his phone, but was by no mean such things were essential. Moreover, the story sounds like he'd hacked into the company and stolen the content weeks before. He then just logged into their Slack to taunt them while in the hotel room. Accessing Slack from you phone is not terribly difficult. As for his skills, most teenagers have no skill in general, but have been taught by other teenagers one specific skill. What makes it work isn't because the teenagers are smart but because their targets are dumb. The NSA already has all these skills. The one thing that would be valuable to the NSA is autistic obsession with tech. There are a lot of autism-spectrum people who you could just stick in a room and watch blossom with tech skills because they are obsessed with them. You don't have to 'train' them, they'll train themselves. But, their goals aren't aligned with the NSA. The NSA doesn't go romping through the Internet hacking whomever they find. NSA hackers are given specific tasks to achieve, they must play by the rules, and the paperwork involved is more arduous than the actual hacking. Such autistic kids would not do well in that environment. The kind kids the NSA wants to hire are those that are socialized enough they won't get so angry at the needless paperwork and roadblocks that they go off on a rampage (like Snowden). That's a rare enough skill to find. All the rest of the hacking skills can be taught. If you are an organization with zero skills of your own, then sure, hiring such kids will at least get you started. But you'll exhaust their value within 3 months, after which you've got a sociopath on your hands that you have to deal with.

Christmas greetings from EasyPark! Not sure why my colleagues got notified 10 days ago! 😑 #ransomeware #databreach