2014, Blog, Computer and Electronics, Data and Security

Using Microsoft Powerpoint as Malware Dropper

Security Affairs

NOVEMBER 16, 2018

Marco Ramilli, founder and CEO at cyber security firm Yoroi has explained how to use Microsoft Powerpoint as Malware Dropper. The evidence comes from traffic analysis where the identified pattern sends (HTTP POST) data on browser history and specifically crafted files under User – AppData to specific PHP pages.

Computer and Electronics

Computer and Electronics File names Security IT

Scraping the TOR for rare contents

Security Affairs

JULY 18, 2019

Cyber security expert Marco Ramilli explains the difficulties for scraping the ‘TOR networks’ and how to enumerate hidden-services with s crapers. Plus a queue manager system to manage scrapers conflicts and a database to store scraped data need to be consistent. Scraping the “TOR hidden world” is a quite complex topic.

Computer and Electronics

Computer and Electronics Cybersecurity Security Communications

Malware Training Sets: FollowUP

Security Affairs

MAY 14, 2019

So, I came up with this blog post and this GitHub repository where I proposed a new testing-set based on a modified version of Malware Instruction Set for Behavior-Based Analysis , also referred as MIST. The original post along many other interesting analysis are available on the Marco Ramilli blog: [link]. Pierluigi Paganini.

Artificial Intelligence

Artificial Intelligence Computer and Electronics Honeypots Cybersecurity

Webinars

Launching LLM-Based Products: From Concept to Cash in 90 Days

Driving Responsible Innovation: How to Navigate AI Governance & Data Privacy

MORE WEBINARS

Step By Step Office Dropper Dissection

Security Affairs

APRIL 5, 2019

This is not going to be a full path analysis so If you are interested in a more complete one, including dissection steps on final payloads, please refer to some of my previous analysis ( HERE , HERE , HERE ) or to Yoroi’s Blog. The used variable holds a Base64 representation of encrypted data. I am going to call this stage: stage1.

Computer and Electronics

Computer and Electronics Encryption Communications Security

OilRig APT group: the evolution of attack techniques over time

Security Affairs

AUGUST 7, 2019

Security researcher Marco Ramilli presents a comparative analysis of attacks techniques adopted by the Iran-Linked OilRig APT group. OilRig Description : According to MITRE , OilRig is a threat group with suspected Iranian origins that has targeted Middle Eastern and international victims since at least 2014.

e-Delivery

e-Delivery Computer and Electronics Phishing Communications

Is Emotet gang targeting companies with external SOC?

Security Affairs

OCTOBER 14, 2019

First of all the attacker knew the target organization was protected by a SOC (Security Operation Center) so she sent a well crafted email claiming to deliver a Microsoft document wrapping out the weekly SOC report as a normal activity in order to induce the victim to open-it. But let’s try to quickly check it. Conclusion.

Computer and Electronics

Computer and Electronics Security Encryption IT

Snowden Ten Years Later

Schneier on Security

JUNE 6, 2023

In 2013 and 2014, I wrote extensively about new revelations regarding NSA surveillance based on the documents provided by Edward Snowden. And given that the UK police would raid its offices in July 2014, it had legitimate cause to be worried. So would the FBI breaking into my home and seizing my personal electronics.

Computer and Electronics

Computer and Electronics Encryption Government Privacy

GUEST ESSAY: The story behind how DataTribe is helping to seed ‘Cybersecurity Valley’ in Maryland

The Last Watchdog

JUNE 4, 2019

GCIS was a Davos-level conference with no vendors and no selling, where scores of chief security information officers (CISOs), top CEO’s, industry and government thought leaders and leading innovators discussed the myriad challenges in and around cybersecurity and possible solutions in today’s environment.

Cybersecurity

Cybersecurity Computer and Electronics Data science Marketing

First Ever Multi-State Data Breach Lawsuit Targets Healthcare Provider: Cybersecurity Trends

eDiscovery Daily

JANUARY 10, 2019

Just as the number of data breaches continues to rise, the number of lawsuits over data breaches continues to rise as well. Chances are that your data has been hacked at some point from at least one company with which you do business. But this lawsuit is unique. million US citizens. million US citizens.

Data breaches

Data breaches Cybersecurity Computer and Electronics Insurance

Me on the Equifax Breach

Schneier on Security

NOVEMBER 8, 2017

Hearing on "Securing Consumers' Credit Data in the Age of Digital Commerce". Mister Chairman and Members of the Committee, thank you for the opportunity to testify today concerning the security of credit data. My name is Bruce Schneier, and I am a security technologist. Before the. Committee on Energy and Commerce.

Personal data

Personal data Computer and Electronics Privacy Data breaches

Weekly podcast: Yahoo hacker sentenced, acoustic DoS attack and GDPR compliance fails

IT Governance

JUNE 1, 2018

This week, we discuss the sentencing of one of the perpetrators of the 2013 Yahoo breach, a new type of denial-of-service attack that can crash computers just using sound and how not to email your customers. Hello and welcome to the IT Governance podcast for Friday, 1 June 2018. Here are this week’s stories.

GDPR

GDPR Compliance Computer and Electronics Data breaches

Frequent VBA Macros used in Office Malware

Security Affairs

OCTOBER 1, 2019

5.1") objHTTP.Option(4) = 13056 ' Ignore cert errors because self signed cert objHTTP.Open "POST", URL, False objHTTP.setRequestHeader "User-Agent", "Mozilla/4.0 compatible; MSIE 6.0; 5.1") objHTTP.Option(4) = 13056 ' Ignore cert errors because self signed cert objHTTP.Open "POST", URL, False objHTTP.setRequestHeader "User-Agent", "Mozilla/4.0

Computer and Electronics

Computer and Electronics Security Encryption Passwords

Part 1: OMG! Not another digital transformation article! Is it about understanding the business drivers?

ARMA International

SEPTEMBER 13, 2021

Some technology trends such as real-time data analytics are on-going, while others are more recent, such as blockchain. This means imaging the “art of the possible” for a new future using a cloud computing model to deliver transformative change. Srivastav 2014) See Figure 1 (HistoryComputer 2021).

Digital transformation

Digital transformation Blockchain IT Computer and Electronics

Part 2: OMG! Not another digital transformation article! Is it about the evolution from RIM to Content Services?

ARMA International

SEPTEMBER 22, 2021

Some technology trends such as real-time data analytics are on-going, while others are more recent, such as blockchain. This means imagining the “art of the possible” for a new future using a cloud computing model to deliver transformative change. The “Art of the Possible” for the End-state.

Digital transformation

Digital transformation Content services IT e-Discovery

2019 end-of-year review part 1: January to June

IT Governance

DECEMBER 27, 2019

A royal baby, a fire at Notre-Dame, the highest grossing film of all time and more than 12 billion breached data records: 2019 has been quite a year. IT Governance is closing out the year by rounding up 2019’s biggest information security stories. Part one covers January to June, and will be followed by part in the coming days.

Data breaches

Data breaches GDPR Passwords Personal data

2019 eDiscovery Case Law Year in Review, Part 1

eDiscovery Daily

JANUARY 6, 2020

annual review of cases that we covered on the eDiscovery Daily blog over the past year. Last year, eDiscovery Daily published 66 posts related to eDiscovery and data privacy case decisions and activities over the past year, covering 56 unique cases ! 2014: Part 1 , Part 2 , Part 3 , Part 4. Stay tuned!

e-Discovery

e-Discovery Passwords Computer and Electronics Metadata

2017 eDiscovery Case Law Year in Review, Part 3

eDiscovery Daily

JANUARY 9, 2018

Today, let’s take a look back at cases related to possession, custody and control, subpoena of cloud provider data, waiver of privilege and the first part of the cases relating to sanctions and spoliation. Just because you don’t physically have your hands on the data doesn’t mean you’re not responsible for it. Wilkinson, Jr.

e-Discovery

e-Discovery Computer and Electronics Communications Cloud

List of data breaches and cyber attacks in May 2020 – 8.8 billion records breached

IT Governance

JUNE 1, 2020

We have just seen 8,801,171,594 breached data records in one month. Take a look at every data breach and cyber attack that we recorded in May in this blog. Meanwhile, you can stay up to date with the latest news by subscribing to our Weekly Round-up or visiting our blog. Cyber attacks. million).

Data breaches

Data breaches Ransomware Computer and Electronics e-Delivery

Part 3: OMG! Not another digital transformation article! Is it about effecting risk management and change management?

ARMA International

SEPTEMBER 27, 2021

Some technology trends such as real-time data analytics are ongoing, while others are more recent, such as blockchain. This means imagining the “art of the possible” for a new future using a cloud computer model to deliver transformative change. Srivastav 2014, p 18). Risk Management and DT Experience.

Digital transformation

Digital transformation Risk IT Computer and Electronics

Ten Years Later, New Clues in the Target Breach

Krebs on Security

DECEMBER 14, 2023

retail giant Target was battling a wide-ranging computer intrusion that compromised more than 40 million customer payment cards over the previous month. Rescator, advertising a new batch of cards stolen in a 2014 breach at P.F. 18, 2013, KrebsOnSecurity broke the news that U.S. Chang’s.

Computer and Electronics

Computer and Electronics Marketing Sales Healthcare

Is APT27 Abusing COVID-19 To Attack People ?!

Security Affairs

MARCH 19, 2020

Security researcher Marco Ramilli analyzed a new Coronavirus (COVID-19)-themed attack gathering evidence of the alleged involvement of an APT group. Today I want to contribute to such a blog-roll analyzing a new spreading variant that hit my observatory. MSOSTYLE.EXE is an old Microsoft Office Data Provider for WBEM.

Computer and Electronics

Computer and Electronics IT Encryption Security

APT34: Glimpse project

Security Affairs

MAY 2, 2019

Context: Since at least 2014, an Iranian threat group tracked by FireEye as APT34 has conducted reconnaissance aligned with the strategic interests of Iran. Whoever is leaking the toolset also has been dumping information about the victims OilRig has targeted, as well as data identifying some of the servers the group uses in its attacks.

Computer and Electronics

Computer and Electronics Communications Government Security

The Hacker Mind Podcast: Reverse Engineering Smart Meters

ForAllSecure

MAY 13, 2022

Smart Meters provide the data to support a cleaner future, showing how much energy is being used and how much this will cost you. Vamosi: But as someone who wrote a book questioning the security of our mass produced IoT devices, I wonder why no one bothered to test and certify these devices before they were installed?

Energy and Utilities

Energy and Utilities Computer and Electronics IT Security

Iranian Threat Actors: Preliminary Analysis

Security Affairs

JANUARY 15, 2020

agencies and security experts warn about a possible cybersecurity infiltration from Iranian government and alert to increase cybersecurity defensive levels. Original Post published on Ramilli’s blog: Iranian Threat Actors: Preliminary Analysis. I am a computer security scientist with an intensive hacking background.

Computer and Electronics

Computer and Electronics Cybersecurity Government Security

2019 eDiscovery Case Law Year in Review, Part 3

eDiscovery Daily

JANUARY 8, 2020

Yesterday, we looked back at cases related to cooperation, form of production, privilege and confidentiality disputes, social media related disputes and a key case regarding biometric security. US forecloses the government’s ability to obtain this type of data without a warrant. 2014: Part 1 , Part 2 , Part 3 , Part 4.

e-Discovery

e-Discovery Privacy Computer and Electronics Insurance

Information Management Today

Using Microsoft Powerpoint as Malware Dropper

Scraping the TOR for rare contents

Webinars

Trending Sources

Malware Training Sets: FollowUP

Webinars

Step By Step Office Dropper Dissection

OilRig APT group: the evolution of attack techniques over time

Is Emotet gang targeting companies with external SOC?

Snowden Ten Years Later

GUEST ESSAY: The story behind how DataTribe is helping to seed ‘Cybersecurity Valley’ in Maryland

First Ever Multi-State Data Breach Lawsuit Targets Healthcare Provider: Cybersecurity Trends

Me on the Equifax Breach

Weekly podcast: Yahoo hacker sentenced, acoustic DoS attack and GDPR compliance fails

Frequent VBA Macros used in Office Malware

Part 1: OMG! Not another digital transformation article! Is it about understanding the business drivers?

Part 2: OMG! Not another digital transformation article! Is it about the evolution from RIM to Content Services?

2019 end-of-year review part 1: January to June

2019 eDiscovery Case Law Year in Review, Part 1

2017 eDiscovery Case Law Year in Review, Part 3

List of data breaches and cyber attacks in May 2020 – 8.8 billion records breached

Part 3: OMG! Not another digital transformation article! Is it about effecting risk management and change management?

Ten Years Later, New Clues in the Target Breach

Is APT27 Abusing COVID-19 To Attack People ?!

APT34: Glimpse project

The Hacker Mind Podcast: Reverse Engineering Smart Meters

Iranian Threat Actors: Preliminary Analysis

2019 eDiscovery Case Law Year in Review, Part 3

Stay Connected