Maciej Pyśka

https://lnkd.in/d5nBHuMs 🔒 Cybersecurity Alert: Polish Institutions Targeted by APT28 Malware Campaign 🚨 Attention all stakeholders, Recent reports indicate that Polish government institutions have fallen victim to a significant malware campaign orchestrated by a Russia-linked nation-state actor known as APT28. 🔍 According to CERT Polska, this campaign employs sophisticated tactics, such as sending enticing emails to recipients in an attempt to persuade them to click on malicious links. Clicking these links redirects victims to run.mocky[.]io, eventually leading to webhook[.]site—a legitimate platform used to disguise the download of malware. 📂 The attackers ingeniously disguise malicious files within ZIP archives, masquerading a Windows Calculator binary as a JPG image ("IMG-238279780.jpg.exe"). Furthermore, the campaign utilizes DLL side-loading techniques to execute hidden batch scripts and download additional payloads onto compromised systems. 🔑 Notably, APT28 leverages authentic services like Mocky and webhook[.]site to evade traditional security measures, a tactic previously observed in similar campaigns involving custom backdoors like HeadLace. This alert serves as a crucial reminder for organizations and individuals alike to remain vigilant against phishing attempts and suspicious links. Regular security awareness training and robust endpoint protection are essential defenses in combating such sophisticated threats. Stay informed, stay secure. #Cybersecurity #Malware Cybersecurity #news and Learning, Security Awareness, Cyber Security Basics, Cybersecurity #Vulnerabilities, Cyber Security Attacks and #CyberSecurity #Breaches, IT Security Training, Security Best Practices, Latest Trends, Latest Cyber News, Security #Threathunting, Security #Threat #Intelligence https://lnkd.in/eqpPwT6R This group is for Cyber Security Latest Trends, Latest Cyber Attacks, Cyber Security Vulnerabilities, Cyber Security Breaches, IT Security Training, Security Advisory and Best Practices... All Cyber Security Trainees, IT Security Aspirants, IT Security Experts, IT Engineers, IT Consultants, etc... all are welcome to Join... Regards, Ahsan Khan & Cyber Security News and Learning Updated...Team #cybersecurity #cyberattack #informationsecurityawareness #securityawarenesstraining #cybersec #cybersecurityawareness #learning #cybersecuritynews #cybersecuritytips #hackernews #securitybestpractices #cybersecuritynewsandlearningupdated #cybersecurityanalyst #cybersecurityexpert #informationgovernance #latestcyberattacks #latestcyberbreaches #latestsecurityvulnerabilities #latestcybersecuritybreaches #cybersecurity #phishingattack #ransomware #securityawareness #howtoprotectyourbusiness #businessemailcompromise #vendorsecurity #cyberinsurance #physicalsecurity #nistframework #emailauthentication #secureremoteaccess #phishing #cyberattack #cybercrime #elearning

1

In this publication you can read about anti-money laundering tools and techniques, forensic investigations and financial audits, etc. https://lnkd.in/dK_JD3Vh #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding

2

😃check out what security consultants and the business, can do to revise approaches, promote better engagement, build better rapport, bring greater value to the process, along with avoiding some of the common mistakes that we’ve all been known to make! 👀😎

2

I invite you to watch a scientific lecture of mine on YouTube titled 'Deep Packet Inspection Analysis: Examining One Packet Killers,' organized by EC-Council and EC-Council University. Content: 1:37 Opening words 3:58 Why IPS, WAF, and SIEM solutions are not enough. 7:07 Summary of the need for deep packet inspection analysis. 10:14 The four main categories of weaknesses/vulnerabilities. 10:53 DoS Attack Categories. 12:39 One Packet Killer via a vulnerability (CVE-2021-45105). 13:45 One Packet Killer via a weak protocol design in DHCP. 16:03 One Packet Killer via a weak protocol design in Modbus over TCP. 21:52 One Packet Killer via a weak protocol design in WTP. 22:53 One Packet Killer via a weak protocol design in BAT_GW. 26:13 One Packet Killer via a weak protocol design in H.225.0. 31:40 Findings (a breakdown of the possibilities and limitations behind functionalities within protocols which can be misused for DoS attacks under specific circumstances). 32:45 Protocol-based DoS Attacks. 33:48 DoS Attacks: Classification and Protocol Weakness Examples. 35:00 Some possible reasons why an attacker might send a single such packet ('One Packet Killer'). 36:46 Conclusions of the webinar. 39:42 Recommendations on protocol weaknesses. 41:16 An example of a 'Silent Killer' using a ubiquitous protocol DNS. 47:35 Q&A. 58:47 Closing words. URL: https://lnkd.in/dMMTA6Tu

9

Module 3 of Exploit Development is up on Patreon. This one covers Structured Exception Handler Overwrites https://lnkd.in/em4tm3Fa

7

New feature in TaskForce 2024.6! 🎉 With the new TaskForce update, you can combine various ports into a group in Express mode. Each group has different settings of target folder, file format, type of hash to calculate, and case report fields. #dfir #digitalforensics #forensicimaging

13

Our intern Andreas Volynets, demonstrates how the TOR functionality is applied with easy steps to provide the basic algorithmic weapon for cyber security (A critical aspect of the comprehensive security services we offer to companies). With our intricate know-how, we ensure your safety, confidentiality and integrity. Ready to uncover the secrets of cyber defence. More info: https://lnkd.in/ddf6MdGm #algopan #AlgopanInc #CyberSecurity #KaliLinux #TORBrowser #Privacy #DataProtection #TechExpertise #InformationSecurity #CyberDefense #CorporateSecurity

10

1 komentarz

We open the issue with an interview with Magda Chelly, who will tell you about how she got started in cybersecurity and how she got to the top. https://lnkd.in/d2-QwCpr #infosec #cybersecurity #pentest #pentesting #hacking #hackers #opensource

2

This time we focused on USB Forensics - inside you will find three excellent articles on the topic, as well as a host of other pieces covering different fields. https://lnkd.in/diQr87b6 #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding

1

Critical Vulnerability Alert: CVE-2024-27804 Risk Information: - CVSS v2 Base Score: 9.3 (High) - CVSS v3 Base Score: 7.8 (High) Affected systems: iOS 17.5, iPadOS 17.5, tvOS 17.5, watchOS 10.5, and macOS Sonoma 14.5. An app could potentially execute arbitrary code with kernel privileges due to an issue with memory handling. Poc: https://lnkd.in/gpi8YcNS

1

👉 CISO2CISO.COM 👈 Cloud Cybersecurity Market Analysis by Enisa - European Union Agency for Cybersecurity EXECUTIVE SUMMARY The present European Union Agency for Cybersecurity (ENISA) report is an analysis of the cloud cybersecurity market, planned for in ENISA’s Work Programme 2022 (2) under activity O.7.1., ‘Market analysis on the main trends in the cybersecurity market on both the demand side and the supply side’. The selection of this segment for this year’s cybersecurity market analysis is the result of a poll carried out with the involvement of multiple stakeholders, both outside and within ENISA. #ENISA Read the complete post in 👉 CISO2CISO.COM 👈 or clicking here in the image below 👇. If you find this information useful and valuable share it with your professionals contacts & networks and leave your comments. Thanks The CISO2CISO Advisors Team. #CISO2CISO #Cybersecurity #CISO https://lnkd.in/dB7rbbBK

2

SS7 ramblings Some time ago I was asked how user can protect himself from SS7 attacks. Obvious generic on-the-surface answer is - enable app-level 2FA, password for messengers - basically get rid of SMS authentication. However, this may still not be fully acceptable level, due to potential call interception, and the fact that some services may have hard-wired SMS/Call authentication or password reset. Throughout the conversation I was asked whether disabling 'roaming mode' will help? Was not sure in the moment - however, after quick research I tend to believe that disabling 'roaming mode' on the phone itself won't have any positive effect, but disabling 'roaming' in the telecom operator itself will provide significant boost in defense. Security community, what are your thoughts on that? What user can do? Maybe some Telco's have implemented SS7 defenses and it's a matter of switching to the 'right' cellular provider?

3

8 komentarzy

New article published: "EU Cybersecurity Legislation Overview – NIS-2 and DORA with Complementary #SOC2 and #GDPR Frameworks" Link here: https://lnkd.in/e5k45Qns Trade Commissioner Service | Service des délégués commerciaux EU Economy and Finance Belgian Cyber Security Coalition TotalEnergies Power & Gas Belgium #NIS-2 #fintech #criticalinfra #europe #cybersecurity #compliance #blockchain

2

BSOD error in latest crowdstrike update. Many Windows machines blue screening, stuck at recovery Follow for official update or workaround: https://lnkd.in/dWQRhFvH Possible Workaround Steps: >Boot Windows into Safe Mode or the Windows Recovery Environment. >Navigate to the C:\Windows\System32\drivers\CrowdStrike directory. >Locate the file matching “C-00000291*.sys”, and delete it.  >Boot the host normally. #Crowdstrike #BSOD #Cybersecurity #BOSDerr

13

This time we focused on USB Forensics - inside you will find three excellent articles on the topic, as well as a host of other pieces covering different fields https://lnkd.in/diQr87b6 #infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding

1

Would you like to learn new tools that you will use in your daily investigative work? eForensics Magazine will meet your needs. https://lnkd.in/d7_mm2JV #infosec #cybersecurity #pentest #pentesting #hacking #hackers #opensource

1