Créer un compteSe connecter

Recherches récentes

Aucune recherche récente

Options de recherche

Disponible uniquement lorsque vous êtes connecté.
pouet.chapril.org est l'un des nombreux serveurs Mastodon indépendants que vous pouvez utiliser pour participer au fédiverse.
Chapril https://www.chapril.org est un projet de l'April https://www.april.org

Administré par :

Statistiques du serveur :

1,1K
comptes actifs

pouet.chapril.org: À proposAnnuaire des profilsPolitique de confidentialité

Mastodon: À proposTélécharger l’applicationRaccourcis clavierVoir le code sourcev4.3.7

#infosec

406 messages148 participants42 messages aujourd’hui
Public
OTX Bot

How ToddyCat tried to hide behind AV software

The ToddyCat APT group has developed a sophisticated tool called TCESB to stealthily execute payloads and evade detection. This tool exploits a vulnerability (CVE-2024-11859) in ESET Command line scanner for DLL proxying, using a modified version of the open-source EDRSandBlast malware. TCESB employs techniques like DLL proxying, kernel memory manipulation, and Bring Your Own Vulnerable Driver (BYOVD) to bypass security solutions. It searches for kernel structure addresses using CSV or PDB files, installs a vulnerable Dell driver, and decrypts AES-128 encrypted payloads. The discovery highlights the need for monitoring driver installations and Windows kernel debug symbol loading events to detect such sophisticated attacks.

Pulse ID: 67f3cb12758e286216442770
Pulse Link: otx.alienvault.com/pulse/67f3c
Pulse Author: AlienVault
Created: 2025-04-07 12:54:42

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
#CyberSecurity#Dell#EDR
Public
Jonathan Kamens

Here's a somewhat novel #LinkedIn connection request scam.
I am not, actually, connected to the person named in the message sent with this connection request. In other words, "Notice you're connected with her," is simply a lie. Did they think I wouldn't notice, or what? I suppose maybe some people wouldn't.
Needless to say I blocked this person. I am careful in general about whom I connect with on LinkedIn, but I especially don't want to interact with dirtbag scammers.
#infosec #opsec #scam

LinkedIn connection request from "Paul Bereschi", whose bio line describes him as "Engineering Teams for Ambitious Founders | Sales and Marketing Specialist @ Duty…" The message in the connection request says, "Hi Jonathan - do you know [blurred] personally? Noticed you're connected with her. We worked with her on the [blurred] website. Let's connect as well!"
Public
Frank

Kent iemand een wachtwoordenmanager geschikt voor een overheidsorganisatie?

Dus:
- integreert met de bekende browsers en OSsen op desktop en mobiel (Windows, Android, iOS, MacOS, Linux)
- self hosted en/of
- digitaal autonome/soevereine dienst
- floss
- stuk centrale beheerbaarheid
- 100+ gebruikers moet gemakkelijk te beheren zijn

#informatiebeveiliging#infosec
Public
OTX Bot

Unveiling EncryptHub: Analysis of a multi-stage malware campaign

EncryptHub, an emerging cybercriminal entity, has been conducting multi-stage malware campaigns using trojanized applications and third-party distribution services. Their tactics include using PowerShell scripts for system data gathering, information exfiltration, and payload deployment. The threat actor prioritizes stolen credentials based on cryptocurrency ownership and corporate network affiliation. EncryptHub is developing a remote access tool called 'EncryptRAT' with plans for future distribution. Their evolving killchain involves multiple stages, including initial execution, data exfiltration, system information collection, and eventual deployment of the Rhadamanthys malware. Despite operational security mistakes, EncryptHub continues to refine their tactics, emphasizing the need for vigilant cybersecurity measures.

Pulse ID: 67f3aae3b4d4fbbfe08e7839
Pulse Link: otx.alienvault.com/pulse/67f3a
Pulse Author: AlienVault
Created: 2025-04-07 10:37:23

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
#CyberSecurity#ICS#InfoSec
Public
Etienne / Tek

Hacking the Call Records of Millions of Americans #infosec
evanconnelly.github.io/post/ha

evanconnelly.github.io · Hacking the Call Records of Millions of AmericansImagine if anyone could punch in a phone number from the largest U.S. cell carrier and instantly retrieve a list of its recent incoming calls—complete with timestamps—without compromising the device, guessing a password, or alerting the user. Now imagine that number belongs to a journalist, a police officer, a politician, or someone fleeing an abuser. This capability wasn’t a hypothetical. I recently identified a security vulnerability in the Verizon Call Filter iOS app which made it possible for an attacker to leak call history logs of Verizon Wireless customers.
Public
OTX Bot

Lazarus Group Targets Developers with New Malware

North Korean threat actors have intensified malicious activities on npm
ecosystem who are known for ‘Contagious Interview’ operation.

Pulse ID: 67f39d0e16d9fdedb66d1bc8
Pulse Link: otx.alienvault.com/pulse/67f39
Pulse Author: cryptocti
Created: 2025-04-07 09:38:22

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

LevelBlue Open Threat ExchangeLevelBlue - Open Threat ExchangeLearn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.
#CyberSecurity#InfoSec#Korea
Public
Grant_H

#infoSec question:
What is a safe tool to use for school students to reporting #safeguarding issues?
The current bar is a Google Form, so below ground level. A quick search shows a handful of e2e options - suggestions for what is safe and easy for students and admins (counsellors, not tech people)
Boosts welcome if it's not your speciality.

ExplorerFlux en direct
À propos