-
Country to country APT attack mechanism not complex, believe that it exploit design flaw instead of backdoor – Jun 2019
Preface: It was the best of times, it was the worst of times, it was the age of wisdom, it was the age of foolishness, … Synopsis: Mongoose is a cross-platform embedded web server and networking library with functions including different protocol (TCP, HTTP, WebSocket, Server MQTT client and broker). Since the footprint is small…
-
It is hard to judge it was a self defense or attack. New York Times cyber attack news – 16th Jun 2019
-
As of May 9, 2019, even “Virustotal” did not have his record! where is he from?
Preface: The Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) have identified a malware variant— so called ELECTRICFISH. Technical details: The malware implements a custom protocol like “Tor browser”. The aim to allows traffic by-pass defense mechanism in between source and a destination Internet Protocol (IP) address. The malware continuously attempts…
-
Analysis Reports by US Homeland Security – Legitimate open source remote administration tool re-engineer by threat actor as APT way of attack – Dec 2018
Preface: Quasar, a legitimate open-source remote administration tool. It is a fast and light-weight remote administration tool coded in C#. Background: APT actors have adapted Quasar and created modified minor (1.3.4.0) and major (2.0.0.0 and 2.0.0.1) versions. Since the re-engineering Quasar client will be mimics a Mozilla Firefox 48 browser running on Windows 8.1 or…
-
Fake apps embedded ultimate spyware are being infect smartphones especially Android – Dec 2018
Preface: Blackhat conference held 3rd to 6th December 2018 in London. A topic awaken people bring attention to the smartphone security awareness especially Android OS. Technical details:Cyber security expert observe that a malform type of counterfeit apps spreading via watering hole websites and phishing emails. Targets were likely approached directly and encouraged to visit the…
-
Could ring 2 have the same momentum as a IoT backdoor?
Preface: In x86 protected mode, the CPU is always in one of 4 rings. The Linux kernel only uses 0 and 3: 0 for kernel 3 for users Hidden janitor living in your computer SMM is triggered through a System Management Interrupt (SMI), a signal sent from the chipset to the CPU. During platform initialization,…
-
2nd Oct 2018 – Homeland security alert (Retail payment system security advisory)
US Homeland security urge banking industry especially payment gateway services provider staying alert of new round of malicious cyber attack of their system. Similar of cyber attack was happened in Taiwan. The heist draw the cash equal to $2.6m (£2.1m). Homeland security reveal how the technique let ATM machine like human vomiting. But this is…
-
My speculation on how Cisco (Talos) found the malware (VPNFilter malware).
Preface: Using Big Data and data mining methods to predict attacks before they happen,the Cisco Umbrella Security Research team built such detection framework. Point of view: a. Vulnerability routers are vulnerable to Shell Metacharacters Attack Regarding to the observation result of Cisco Talos security team. There are group of router devices are vulnerable. They are…
-
The next page of cyber attack – After European allies did the justice action (bombard Syria chemical facilities).
Preface I can’t hold the tears back! Rest in peace to victims who were killed in a suspected chemical attack on the rebel-held town of Khan Sheikhoun in north-western Syria on 4 April, 2018. International Law About Convention on the Prohibition of the Development, Production, Stockpiling and Use of Chemical Weapons and on their Destruction…
-
The unknown warfare – weaponize of electronics
Preface: Called “Henosis,” from the Greek word for unity, Lockheed Martin’s new digital dashboard is meant to give commanders a single interface to organize cyber defense and offense in real time against land, sea, air, and space targets. Who is the culprit deploying cyber techniques for warfare? The Gulf War has demonstrated yet again the…