FedSearch - Federated network search engine

Geekmaster 👽:system76: · @Geekmaster

166 followers · 1245 posts · Server ioc.exchange

If you use #RDP, make sure it's strictly internal, and limited only to specific #admin accounts, and that you *DO NOT* have any #3389 open publicly. That IP will be found (quickly), and your #endpoint will be attacked, if not #breached. #BianLian has shifted their attack model. @cisacyber dropped an advisory this week, here's a decent summary of what's up: https://www.darkreading.com/threat-intelligence/bianlian-cybercrime-group-changes-attack-methods-cisa-advisory-notes?_mc=NL_DR_EDT_DR_weekly_20230518&cid=NL_DR_EDT_DR_weekly_20230518&sp_aid=116563&elq_cid=38046155&sp_eh=144c4ccfdc4bcabeefa4110f1ea26cecf2a866a1c04b99a946a3df0524ced34c&sp_eh=144c4ccfdc4bcabeefa4110f1ea26cecf2a866a1c04b99a946a3df0524ced34c&utm_source=eloqua&utm_medium=email&utm_campaign=DR_NL_Dark%20Reading%20Weekly_05.18.23&sp_cid=48613&utm_content=DR_NL_Dark%20Reading%20Weekly_05.18.23

#Hacking #ThreatIntelligence #Cloud #CloudAttackSurface #DataExfiltration #Exfil #AttackSurfaceReduction #Ransomware

#rdp #admin #endpoint #breached #bianlian #hacking #threatintelligence #cloud #cloudattacksurface #dataexfiltration #exfil #attacksurfacereduction #ransomware

Last updated 1 year ago

Original post

Geekmaster 👽:system76: · @Geekmaster

166 followers · 1244 posts · Server ioc.exchange

#Infostealers are a growing threat. Sure, they've been around for decades, but now it's becoming a much larger market on the #Darkweb. “What we are seeing is an entire #underground #economy and #supporting #infrastructure built around #infostealers, making it not only possible but also potentially #lucrative for relatively #lowskilled #threatactors to get involved,”
https://www.scmagazine.com/news/threat-intelligence/data-log-thefts-explode-as-infostealers-gain-popularity-with-cybercriminals?external_id=HBwZ-n4B490LDY0Z-dKj&external_id_source=mrkto&mkt_tok=MTg4LVVOWi02NjAAAAGLzUgAldBXEeVNitVuN5rpvANUjNCaIIBnTmArpblpBWE5hgFJSS9PoGhu7RxEp5cWxLUDxbLdJ7juuAc83cEfRAyiFxOpe18Kant7MXUMhA

#Hacking #ThreatIntelligence #Cloud #CloudAttackSurface #TOR #DataExfiltration #Exfil #RussianMarket #Cyberespionage #RussiaAPT #ChinaAPT #APT #UseMFA #AttackSurfaceReduction

#infostealers #darkweb #underground #economy #supporting #infrastructure #lucrative #lowskilled #threatactors #hacking #threatintelligence #cloud #cloudattacksurface #tor #dataexfiltration #exfil #russianmarket #cyberespionage #russiaapt #chinaapt #apt #usemfa #attacksurfacereduction

Last updated 1 year ago

Original post

zizak · @zizak

0 followers · 60 posts · Server techhub.social

Open media

#dataexfiltration #Leavenworth

https://dnyuz.com/2023/04/13/leader-of-online-group-where-secret-documents-leaked-is-air-national-guardsman/

#dataexfiltration #leavenworth

Last updated 2 years ago

Original post

Bob Carver · @cybersecboardrm

83 followers · 96 posts · Server infosec.exchange

Open media

Malicious actors can take advantage of "insufficient" forensic visibility into Google Cloud Platform (GCP) to exfiltrate sensitive data, a new research has found.
“Unfortunately, GCP does not provide the level of visibility in its storage logs that is needed to allow any effective forensic investigation, making organizations blind to potential data exfiltration attacks," cloud incident response firm Mitiga said in a report. https://amp.thehackernews.com/thn/2023/03/experts-reveal-google-cloud-platforms.html #CyberSecurity #Google #Cloud #DataExfiltration

#cybersecurity #google #cloud #dataexfiltration

Last updated 2 years ago

Original post

pablolarah · @pablolarah

166 followers · 1270 posts · Server mastodon.social

Open media

🚨 Let's build a Chrome extension that steals everything
by Matt Frisbie
@mattfriz
#browser #browserExtension #dataexfiltration

https://mattfrisbie.substack.com/p/spy-chrome-extension

#browser #browserextension #dataexfiltration

Last updated 2 years ago

Original post

Gareth Emslie 🇿🇦 🇪🇦 🇨🇭 · @keyoke_za

37 followers · 200 posts · Server hachyderm.io

Microsoft Sentinel's solution for SAP has been made generally available, and five new data exfiltration rules have been released as part of the solution. These rules cover activities such as file downloads from malicious IP addresses, and saving sensitive data to USB drives. https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/microsoft-sentinel-solution-for-sap-new-data-exfiltration/ba-p/3716881 #MicrosoftSentinel #SAP #DataExfiltration

#MicrosoftSentinel #sap #dataexfiltration

Last updated 2 years ago

Original post

Kevin Karhan :verified: · @kkarhan

350 followers · 6196 posts · Server mstdn.social

@jessdkant Such #airgap-hopping is nothing new.

It doesn't take experts like @stman to turn this into a crude narrowband modem...

And yes, there has been #malware in the wild that does #DataExfiltration by modulating the speed of fans - just in case someone things unplugging or desoldering a speaker works...

IMHO people owning or having said #Govware - #Appliances in their homes are either dangerously incompetent #TechIlliterates or dangerous #ignorants for not banning this shit from prems.

#ignorants #TechIlliterates #appliances #govware #dataexfiltration #Malware #airgap

Last updated 2 years ago

Original post

Xavier «X» Santolaria :donor: :verified_paw: · @0x58

547 followers · 692 posts · Server infosec.exchange

BleepingComputer - Clop ransomware uses TrueBot malware for access to networks

Security researchers have noticed a spike in devices infected with the #TrueBot #malware downloader created by a Russian-speaking hacking group known as Silence.

The threat actor is also using a new custom #dataexfiltration tool called #Teleport. Analysis of Silence's attacks over the past months revealed that the gang delivered Clop #ransomware typically deployed by TA505 hackers, which are associated with the FIN11 group.

#cybersecurity #infosec

https://www.bleepingcomputer.com/news/security/clop-ransomware-uses-truebot-malware-for-access-to-networks/

#truebot #malware #dataexfiltration #teleport #ransomware #cybersecurity #infosec

Last updated 2 years ago

Original post

Mufasa :paw: · @ne1for23

345 followers · 141 posts · Server betweenthelions.link

Open media

A Republican poll worker charged with violating election law admitted he used a personal flash drive to export the electronic poll book at a Michigan precinct

#Michigan #Republican #PollWorker #DataExfiltration #USBFlashDrive #ElectionLaw
https://www.woodtv.com/news/kent-county/testimony-poll-worker-admitted-to-using-usb-drive/

#michigan #republican #pollworker #dataexfiltration #usbflashdrive #electionlaw

Last updated 2 years ago

Original post

Bob Carver · @cybersecboardrm

36 followers · 35 posts · Server infosec.exchange

Open media

The mechanism, dubbed COVID-bit, leverages malware planted on the machine to generate electromagnetic radiation in the 0-60 kHz frequency band that's subsequently transmitted and picked up by a stealthy receiving device in close physical proximity. #CyberSecurity #AirGap #COVert #DataExfiltration
https://thehackernews.com/2022/12/covid-bit-new-covert-channel-to.html

#cybersecurity #airgap #covert #dataexfiltration

Last updated 2 years ago

Original post

Mufasa · @ne1for23

399 followers · 3723 posts · Server mastodon.sdf.org

Open media

A Republican poll worker charged with violating election law admitted he used a personal flash drive to export the electronic poll book at a Michigan precinct

#Michigan #Republican #PollWorker #DataExfiltration #USBFlashDrive #ElectionLaw
https://www.woodtv.com/news/kent-county/testimony-poll-worker-admitted-to-using-usb-drive/

#michigan #republican #PollWorker #dataexfiltration #usbflashdrive #electionlaw

Last updated 2 years ago

Original post

The Hacker News · @hackernews_bot

612 followers · 780 posts · Server social.platypush.tech

Referenced link: https://thehackernews.com/2022/08/the-rise-of-data-exfiltration-and-why.html
Discuss on https://discu.eu/q/https://thehackernews.com/2022/08/the-rise-of-data-exfiltration-and-why.html

Originally posted by The Hacker News / @TheHackersNews@twitter.com: https://twitter.com/TheHackersNews/status/1562047270643965952#m

Businesses have mounted formidable defenses against ransomware in recent years. Threat actors have been searching for another opportunity and found one with data exfiltration.

Read: https://thehackernews.com/2022/08/the-rise-of-data-exfiltration-and-why.html

#TuxCare #Ransomware #DataExfiltration

#TuxCare #Ransomware #dataexfiltration

Last updated 2 years ago

Original post