ALERT! Very Active PHISHING CAMPAIGN still alive targetting Dropbox Users

I received the link via e-mail but also found it online through some redirects and a dropbox typeo domain name. The images and page look spot on ….but if you look at the URI like you should you’ll notice right away we got some problems here! http://glabalinvestment.tk/cost/DROP1/casts/   The campaign is stealing your Gmail, Yahoo,… Read More »

Share Button

BLACKHAT BLACK HAT 2016 USA VEGAS BRIEFING – HORSE PILL: A NEW TYPE OF LINUX ROOTKIT

HORSE PILL: A NEW TYPE OF LINUX ROOTKIT Michael Leibowitz  |  Senior Trouble Maker, Intel Location:  South Seas CDF Date: Thursday, August 4 | 12:10pm-1:00pm Format: 50 Minute Briefing Tracks: Malware Platform Security: VM, OS, Host and Container   What if we took the underlying technical elements of Linux containers and used them for evil? The result a… Read More »

Share Button

BLACKHAT 2016 USA – NEXT-GENERATION OF EXPLOIT KIT DETECTION BY BUILDING SIMULATED OBFUSCATORS

NEXT-GENERATION OF EXPLOIT KIT DETECTION BY BUILDING SIMULATED OBFUSCATORS Tongbo Luo  |  Sr Staff Engineer, Palo Alto Networks Xing Jin  |  Staff Engineer, Palo Alto Networks Location:  Mandalay Bay BCD Date: Thursday, August 4 | 11:00am-11:25am Format: 25 Minute Briefing Tracks: Malware Network Defense   Recently, driving-by downloads attacks have almost reached epidemic levels, and exploit-kit is the propulsion to… Read More »

Share Button

BLACKHAT BLACK HAT 2016 LAS VEGAS USA – INVESTIGATING DDOS – ARCHITECTURE, ACTORS, AND ATTRIBUTION

INVESTIGATING DDOS – ARCHITECTURE, ACTORS, AND ATTRIBUTION Andre Correa  |  Co-Founder, Malware Patrol – malwarepatrol.net Elliott Peterson  |  Special Agent, Federal Bureau of Investigation Location:  Mandalay Bay EF Date: Thursday, August 4 | 11:00am-11:50am Format: 50 Minute Briefing Tracks: Network Defense Internet of Things   DDOS attack usage has been accelerating, in terms of both attack volume and frequency. Such… Read More »

Share Button

BLACKHAT BLACK HAT 2016 USA LAS VEGAS – HTTP COOKIE HIJACKING IN THE WILD: SECURITY AND PRIVACY IMPLICATIONS

HTTP COOKIE HIJACKING IN THE WILD: SECURITY AND PRIVACY IMPLICATIONS Jason Polakis  |  Postdoctoral Research Scientist, Columbia University Suphannee Sivakorn  |  PhD Student, Columbia University Location:  South Seas IJ Date: Thursday, August 4 | 9:45am-10:35am Format: 50 Minute Briefing Track: Web AppSec The widespread demand for online privacy, also fueled by widely-publicized demonstrations of session hijacking attacks against popular websites… Read More »

Share Button

BLACKHAT BLACK HAT 2016 USA LAS VEGAS – TCP INJECTION ATTACKS IN THE WILD – A LARGE SCALE STUDY

TCP INJECTION ATTACKS IN THE WILD – A LARGE SCALE STUDY Gabi Nakibly  |  Network security research leader, Rafael — Advanced Defense Systems Location:  Mandalay Bay EF Date: Thursday, August 4 | 9:45am-10:35am Format: 50 Minute Briefing Track: Network Defense   In this work we present a massively large-scale survey of Internet traffic that studies the practice of… Read More »

Share Button

Black Hat BLACKHAT 2016 USA Las Vegas – BROWSER EXPLOITATION FRAMEWORK (BEEF)

BROWSER EXPLOITATION FRAMEWORK (BEEF) PRESENTED BY Christian Frichot   FREE DOWNLOAD: https://github.com/beefproject/beef   What is BeEF?   BeEF is short for The Browser Exploitation Framework. It is a penetration testing tool that focuses on the web browser. Amid growing concerns about web-borne attacks against clients, including mobile clients, BeEF allows the professional penetration tester to… Read More »

Share Button

BLACKHAT Black Hat Defcon 2016 USA Las Vegas – King Phisher Phishing Campaign Toolkit

KING PHISHER PRESENTED BY Spencer McIntyre DOWNLOAD LINK: https://github.com/securestate/king-phisher   King Phisher is an open source Phishing Campaign Toolkit. This is its technical documentation intended for use by contributors. The source code is available on the GitHub homepage. Additionally documentation intended for use by users can be found in the King Phisher GitHub wiki. What… Read More »

Share Button