-
For Malicious Cyber Activity, US Homeland Security provides visibility to the world – 13th May 2020
Preface: It is impossible to rely on small group of expert to track malicious activities on the Internet. In fact, it needs strong financial support. This is reality, maybe this is a long-running game. Background: US Homeland Security issue an evaluation article on hostile country malware and phishing attacks motion. Perhaps you may ask? Can…
-
Discarded Tesla car parts contain information. Maybe you can buy it on eBay. Who can believe in the technological world? Even if no such incident occurs, the supplier can read your local data without your consent (8th May 2020)
Preface: The traditional method of disposing of hard drives is degaussing or incineration. Headline News: The manufacturer has a hardware disposal policy. The incidents encountered by Tesla may be due to improper handling of third parties. For more information about headline news, please refer to this link. https://www.hackread.com/user-data-found-in-tesla-car-parts-ebay/ Supplement: Should you have doubt about your…
-
Storm of Go language based malware – 6th May 2020
Preface: New Kaiji malware targets IoT devices via SSH brute-force. Background: Gobot is a framework for robotics, drones, and the Internet of Things (IoT), written in the Go programming language. Observation: Programmers usually choose Golang for building the communication layer within the IoT system. One of the biggest draws to Go is the fact that…
-
headline news – cyber attackers from exploiting web servers via web shell malware. 23rd Apr 2020
Preface: Web shells are a well-known attacker technique, but they are often difficult to detect because of their proficiency in blending in with an existing web application. Details: to gain root access to server. Web shells malware are frequently chosen by APT group; however these are just a small number of known used web shells.…
-
Why US Homeland security urge to public stay alert of the vulnerability on DrayTek Devices? 3rd April 2020
Preface: A conspiracy was leaked this week, someone ambitious to spying the world. Details: The espionage activities will be exploit computer technology as 1st approach in today. It is merely relies on design weakness. Yes, it is the vulnerability. When I read the conspiracy details, I was wonder that if the formulation of this design…
-
Kwampirs Targeted Attacks Involving Healthcare Sector – (31st Mar 2020)
Preface: Orangeworm is a group that has targeted organizations in the healthcare sector in the United States, Europe, and Asia since at least 2015. Synopsis: Why does Kwampirs fall into the “Advanced Persistent Threat (APT)” category? For tradition malware “click and action” attacks. APT attack not condct the similar action. Instead, APT merely do the…
-
A retrospective album of BlackEnergy – Feb 2020
Somewhere in time. This is 2015 – BlackEnergy2 exists in the form of a kernel-mode driver, which makes it harder for network administrators to discover the compromise. Black energy Group will mimics their custom tool(driver) thus made to look like a normal Windows component. They are interested in infecting Windows servers especially OPC server. But…
-
Staying alert of Emotet infection, even though you are a Mac User. Feb 2020
Preface: Apple Mac OS as not as easy to compromised compare with other popular operation system. Details (A): Emotet is malware originally engineered as a banking Trojan designed to steal sensitive information. It is a modular malware variant which is primarily used as a downloader for other malware variants such as TrickBot and IcedID. But…
-
Hacker exploit Coronavirus Crisis, send scam email to different industries – 18th Feb 2020
Synopsis: a. Attackers disguise their scam email as an official (WHO) alert issued by the Centers for Disease Control Health Alert Network. (Targeting individuals from the United States and the United Kingdom) b. Attackers disguise their scam email as an alert of Coronavirus status, they are target to shipping industry. Description: About the attack to…
-
Hong Kong Broadband Network customer staying alert! 17th Feb 2020
Synopsis: The threat actors hidden their email phishing package anywhere. As common we know, email phishing scam foot print are wide in area. But the antivirus and malware solution vendor setup blacklist domain name and content filtering function has reduced the infection ratio of malware and ransomware. It looks that the similar of idea to…