-
Imaginations – a phantom command DNS queries activated Stone Drill attack in Saudi
Patrick Jane is a fictional character and the protagonist of the CBS crime drama The Mentalist, Jane is an independent consultant. It looks that sound likes you can me in Cyber world. Ha Ha. The most interested Cyber security topics past two days is the destructive malware dubbed StoneDrill. Since the incident happened end of…
-
Truetype font + code = fileless malware
Security services provider alert the IT world that malware might infiltrate to their infrastructure facilities. However their cyber defense mechanism looks fall into asleep. So strange? Over 140 enterprises in 40 countries affected. Dubbed that fileless or invisible cyber attack common are in three types. They are memory resident, Rootkits and Windows registry. Refer to…
-
He is great partner of virtual machine but he can kill VM simultaneously – address space layout randomization
The trend in IT world running into virtual world nowadays. Even though your mobile phone operation system is run on top of virtual machine. The memory resources utilization from tradition static to dynamic since virtual machine architecture founded. Security experts worries about infiltration of malware on virtual machine. A mitigation step introduce…
-
Mobile Financial App inflicts more contradiction on cyber security – part 1
When you pick up your mobile phone daily, no one will be care of your data privacy in highest priority. Since you are busy with your social media apps (Whatapps, Facebook, Instagram..etc). As easy as today make a payment on air through your mobile phone. However, your habit forming behavior might cause inherent secuirty risks…
-
(Banking Environment) Advanced technology – brings of concerns for cyber security!
Electronic payment one of the major term of in our daily life. It is hard to imagine that what’s the result once without credit card payment, online payment transfer and mobile payment in the world! The cyber attack hits financial institution more frequently and rapidly especially malware. In this discussion, we are going to investigate…
-
A wide range of views (Advanced persistent threat)
We heard a technical terms named advanced persistent threat since 2013. An information which announced by cyber security company (kaspersky, FireEye, Symantec….etc) but not acknowledge by instigator . The story looks amazing that a security consulting firm (Mandiant) fooled by hacker. By coincidence, it found malicious finger print on gmail account and email message contained…
-
Predict 2017 – a political fight on nuclear power facilities
Headline news yesterday (20th Dec 2016) report Ukraine Suffers Power Outage. It was the 2nd time of power disruption this year. As far as I remember the 1st incident occurred on Jan 2016. The motivation of this news lets information security experts re-think about BlackEnergy DDos tools.The Blackenergy soft tools found 2007, a notorious powerful…
-
Descendant of VSAM File Organization,that is blockchain technology today
Old school boy might remember fundamental of Virtual storage access method (VSAM). I object, banking and financial institution are close with VSAM technologies day to day. Yes, they are using mainframe computer. For instance IBM S390. People discontentment of proprietary payment solution (SWIFT) sounds high! Hackers targeted payment system via the SWIFT, no significant figures…
-
Behaviour based Malware Detection Methods, do you think it is outdated?
Whenever Windows OS or applications execute syntax action, check the registry, read or write a file, launch or close a process, etc. It result in Windows calling a service in the System Service Descriptor Table (SSDT). Hooking SSDT technique exploits found on 2010. The problem was that attacker might fool the security check especially antivirus…
-
Do you think 64 bit OS can secure critical facilities in your country?
Few years ago, heard that 64 bit version of windows is more secure. Expert was told, 64-bit operating systems aren’t immune to malware but security features are stronger. Address Space Layout Randomization – incorrect guess may result in the program crashing Mandatory Driver Signing – prevents unsigned drivers provided by malware from running on the…