Blue Team village, Deffcon 2018 | Salted Hash Ep. 43

Host Steve Ragan talks to Munin, a staffer at the DEF CON Blue Team Village about what's happening and what you can expect.
RSS Reader for Computer Security Articles

Host Steve Ragan talks to Munin, a staffer at the DEF CON Blue Team Village about what's happening and what you can expect.

Credit to Author: Woody Leonhard| Date: Fri, 10 Aug 2018 05:22:00 -0700
On July 9, I recommended that you disable Windows Automatic Update and wait to see if the July Microsoft patches brought more mayhem than relief. With the August patches just a few days away, it’s time to put a nail in the July coffin. I strongly recommend that you not install any of the July patches, and pray that Microsoft treats us better in August.
It’s been a tumultuous month.

In this episode, Steve Ragan shows what a hybrid phishing attack looks like as it starts off on one service, and quickly moves to another.

Credit to Author: BrianKrebs| Date: Tue, 07 Aug 2018 19:27:23 +0000
Police in Florida have arrested a 25-year-old man accused of being part of a multi-state cyber fraud ring that hijacked mobile phone numbers in online attacks that siphoned hundreds of thousands of dollars worth of bitcoin and other cryptocurrencies from victims. On July 18, 2018, Pasco County authorities arrested Ricky Joseph Handschumacher, an employee of the city of Port Richey, Fla, charging him with grand theft and money laundering. Investigators allege Handschumacher was part of a group of at least nine individuals scattered across multiple states who for the past two years have drained bank accounts via an increasingly common scheme involving mobile phone “SIM swaps.”
Read MoreCredit to Author: Sharky| Date: Tue, 07 Aug 2018 03:00:00 -0700
The time has come for the sales team at this financial services company to get new top-of-the-line laptops — and they’re being upgraded 80 at a time, reports an IT pilot fish there.
“Late one night, the guy in charge of the upgrade got a call from Security saying that a break-in had occurred,” fish says. “They told him that on the security cameras they saw the thieves making off with a lot of laptops.
“The upgrade project manager arrived at the scene to meet the police — who were very puzzled when he started laughing.
“Turns out the thieves stole 80 decommissioned laptops with no hard drives, while ignoring the 80 new laptops sitting in boxes beside the decommissioned ones.”

What is a phishing kit? In this video, Steve Ragan offers an answer and a look at some of the kits Salted Hash has collected.

Credit to Author: Jonny Evans| Date: Mon, 06 Aug 2018 05:21:00 -0700
Apple chipmaker TSMC suffered a serious WannaCry-related ransomware infection that closed down production at some of its factories. The incident should be a wake-up call for manufacturers across every industry.
TSMC has said the incident was not the result of a direct attack. Instead it says its systems were exposed to the malware “when a supplier installed tainted software without a virus scan.”
The malware spread fast and impacted some of the company’s most advanced facilities used to build Apple’s A-series chips.

Credit to Author: Jonny Evans| Date: Mon, 06 Aug 2018 05:21:00 -0700
Apple chipmaker TSMC suffered a serious WannaCry-related ransomware infection that closed down production at some of its factories. The incident should be a wake-up call for manufacturers across every industry.
TSMC has said the incident was not the result of a direct attack. Instead it says its systems were exposed to the malware. “When a supplier installed tainted software without a virus scan,” it said.
The malware spread fast and impacted some of the company’s most advanced facilities used to build Apple’s A-series chips.