FedSearch - Federated network search engine

Damit wird das ramponierte Ansehen des BSI nach der Schönbohm-Affäre weiter beschädigt. Damit Unternehmen und Bürger:innen dem BSI vertrauen, muss unbedingt der Eindruck vermieden werden, dass Sicherheitslücken auf Bitten der Sicherheitsbehörden offengehalten werden. Beispiele wie #WannaCry und #Pegasus zeigen, dass diese eine Gefahr für die Demokratie sind. 4/4

#wannacry #pegasus

Last updated 1 year ago

Original post

D64 · @D64eV

2689 followers · 296 posts · Server d-64.social

Damit wird das ramponierte Ansehen des BSI nach der Schönbohm-Affäre weiter beschädigt. Damit Unternehmen und Bürger:innen dem BSI vertrauen, muss unbedingt der Eindruck vermieden werden, dass Sicherheitslücken auf Bitten der Sicherheitsbehörden offengehalten werden. Beispiele wie #WannaCry und #Pegasus zeigen, dass diese eine Gefahr für die Demokratie sind. 4/4

#wannacry #pegasus

Last updated 1 year ago

Original post

SECUINFRA Falcon Team · @SI_FalconTeam

21 followers · 9 posts · Server infosec.exchange

Open media

Proof of Concept: #Malware Delivery via #appx/#msix packages.
In our test case we needed administrative permissions to install the package with putty.exe as our test payload.

We did test it first with a #Wannacry #Ransomware binary, but Windows Defender caught the payload and that didn't look so nice on a screenshot 😅

Our .appx demo package is based off of a in-the-wild sample of #Magniber #Ransomware that was signed with a stolen signature (Jan 2022). With this change in Windows 11 it is now possible to install unsigned appx packages (given required perms).
https://twitter.com/f0wlsec/status/1481338661824307204

Detection opportunities:
- Execution out of C:\Program Files\WindowsApps\
- Looking for the special OID documented by Microsoft here: https://learn.microsoft.com/en-us/windows/msix/package/unsigned-package

We are going to publish our #Yara rules for this tomorrow, stay tuned.

#malware #appx #wannacry #ransomware #Magniber #yara

Last updated 2 years ago

Original post

Redhotcyber · @redhotcyber

286 followers · 245 posts · Server mastodon.bida.im

Open media

Una nuova RCE su Windows rivaleggia con il vecchio Eternalblue

Una ricercatrice di sicurezza ha recentemente scoperto una nuova #RCE su #Windows che ha il potenziale per rivaleggiare con il vecchio #EternalBlue, il nome di un altro difetto di sicurezza sempre di Windows utilizzato per diffondere #WannaCry, il #ransomware che ha bloccato le reti di computer in tutto il mondo nel 2017.

Come EternalBlue, la CVE-2022-37958 è una RCE su Windows e consente agli aggressori di eseguire #codice #dannoso senza richiedere l’#autenticazione.

#redhotcyber #informationsecurity #ethicalhacking #dataprotection #hacking #cybersecurity #cybercrime #cybersecurityawareness #cybersecuritytraining #cybersecuritynews #privacy #infosecurity

https://lnkd.in/di-ekKew

#infosecurity #privacy #CyberSecurityNews #cybersecuritytraining #CyberSecurityAwareness #cybercrime #cybersecurity #hacking #dataprotection #ethicalhacking #informationsecurity #redhotcyber #autenticazione #dannoso #codice #ransomware #wannacry #eternalblue #windows #rce

Last updated 2 years ago

Original post

Guinard 💠 · @djoni_off

8 followers · 15 posts · Server infosec.exchange

The book even mentions @malwaretech's part in the #WannaCry pandemic! Along with gangsters laundering money for #DPRK etc.. Geoff White made the effort of a good recollection of the events back then... Congrats!

#wannacry #dprk

Last updated 2 years ago

Original post

Amit Serper :unverified: :donor: · @0xamit

1657 followers · 404 posts · Server infosec.exchange

Open media

The Australian federal police said that the threat actors behind the #medibank breach are in #Russia. This was the Russian response. That's rich coming from the government that was calling the shots on #wannacry and #notpetya .

Absolutely shameless.

#Medibank #russia #wannacry #notpetya

Last updated 2 years ago

Original post