Category: SANS Full Feed

Phishing is always a “whack the mole” like game. Attackers come up with new ways to fool victims. Security tools are often a step behind. Messages claiming to collect unpaid tolls are one current common theme among phishing (smishing?) messages. I just received another one today: The FBI’s Internet Crime Complaint Center warned of these…

Read More

We have offered several different data feeds via our API or other means. However, we are often not very good at documenting what these feeds are all about. Currently, I am in the process of fixing the documentation around these data feeds. These data feeds are used to augment our data, but may also be…

Read More

Johannes noticed a SPAM comment on his YouTube channel: It was clear to us that this was a scam, but it wasn’t clear to us how it worked. The seed phrase allows you to derive the private keys of the wallets, and gives you full control over the wallet. And as security professionals, we know…

Read More

The Good Stuff First This tool is being shared (calling it a tool is generous) due to the number of times last year I had to create fake internet domains. It adds domains and zones to Windows DNS. This was to help with the many student cyber ranges that got ‘sploited [1] in the name of…

Read More

[This is a Guest Diary by David Watson, an ISC intern as part of the SANS.edu BACS program] One thing I’ve learned about cybersecurity, particularly during my time here at the Internet Storm Center is this: If you don’t capture detailed network data (like PCAPs), you can easily miss the full picture of an attack,…

Read More