Blog – Computer Security.org – CyberSecurity News, Information, Education, Certifications, Vulnerabilities and Guides

……

SSDP Distributed Reflection Denial of Service (DrDoS) Attacks may be biggest threat – Traffic Sample & Snort Rule February 15, 2020

SSDP Distributed Reflection Denial of Service attacks are on the rise and may be the biggest threat right now. SSDP attacks do not have the biggest amplification number but they may have the most vulnerable systems to abuse in a reflection attack. Open source reports indicate that there are over 5 million vulnerable systems worldwide […]

Penetration Testing Red Team Reverse Shell Cheat Sheet February 14, 2020

If it’s not possible to add a new account / SSH key / .rhosts file and just log in, your next step is likely to be either trowing back a reverse shell or binding a shell to a TCP port. This page deals with the former. Your options for creating a reverse shell are limited […]

Lokibot IOC Feed InfoStealer Trojan malware PCAP file download traffic sample February 11, 2020

Latest indicators of compromise from our our Lokibot IOC feed. Lokibot is an information stealing (infostealer) trojan targeting users worldwide. It’s was designed for the primary purpose of perpetrating fraud and identity theft. Lokibot was developed in 2015 to steal information from a variety of applications. Despite the age, this malware is still rather popular […]

Latest Vulnerabilities

Hamas Ensnares Israeli Soldiers with Pretty ‘Ladies’

The third catfish attempt in three years from the Palestinian militant group adds a few technical advances to the mix.

Iran-Backed APTs Collaborate on 3-Year ‘Fox Kitten’ Global Spy Campaign

APT34/OilRig and APT33/Elfin have established a highly developed and persistent infrastructure that could be converted to distribute destructive wiper malware.

Huawei Controversy Highlights 5G Security Implications

Security experts say that 5G supply chain concerns should be taken seriously – whether it’s in the context of Huawei or not.

Privacy Experts Skeptical of Proposed Data Protection Agency

A new Data Protection Agency would overhaul federal regulation efforts around data privacy - but experts are skeptical that the U.S. government can get it right.

FBI: $3.5B Lost in 2019 to Known Cyberscams, Ransomware

Cybercriminals double down on successful internet scams, with a focus on phishing, BEC and other defrauding schemes that have proven to work.