You won’t guess where Russian spies are hiding their control servers

Brittany Spears

In the natural world, some predators bide their time near a watering hole waiting for thirsty prey to stop by for a drink. In the cyber world, this is aptly known as a watering hole attack. It’s a favorite tactic of Turla, a Russian hacker group.

According to a new report by Eset, an antivirus manufacturer, Turla used Brittany Spears official Instagram page to hide instructions its malware could use to locate the command server. Once it has that address, the malware can upload its stolen details. We Live Security has the sordid details

[We Live Security]: Turla’s Watering Hole Campaign



Covert Channels and Poor Decisions: The Tale of DNSMessenger

This is why our emails and sensitive documents are all over Wikileaks. Stop clicking shit.  (Geekish)

Talos recently analyzed an interesting malware sample that made use of DNS TXT record queries and responses to create a bidirectional Command and Control (C2) channel. This allows the attacker to use DNS communications to submit new commands to be run on infected machines and return the results of the command execution to the attacker. This is an extremely uncommon and evasive way of administering a RAT. The use of multiple stages of Powershell with various stages being completely fileless indicates an attacker who has taken significant measures to avoid detection.



Trump’s cyber-guru Giuliani runs ancient ‘easily hackable website’

A good way to undermine your “security” brand is to launch a website rife with publicly known exploits.

But how does this even happen? If Rudy Giuliani erred on the side of eye-candy, if he relied on designers instead of infosec specialists, then he’d still have a website built with the most contemporary tools. Designers love new stuff. Instead giulianisecurity.com was built on an end-of-life PHP (5.4) and Joomla (3.1.1). His team exposed LDAP, sshd and mysql — all of which were old and EOL’d.

We can’t trust these people to set up our DVRs, let alone harden our country’s cyber infrastructure.  It’s stunning, really.

Stunned security experts tear strips off president-elect pick hours after announcement

Source: www.theregister.co.uk/2017/01/13/giuliani_joomla_outdated_site/

UPDATE: The DNS record has been taken down but you can still reach giulianisecurity.com by it’s raw IP address.



Machine Efficiency

SAN DIEGO – Shh! you may want to turn down your television set because Alexa the internet-connected home assistant device may be listening. The Amazon Echo system which does everything from getting your weather report to ordering more laundry detergent can also do some things you don’t want it to. When it comes to answering those tough questions or getting…

Source: www.cw6sandiego.com/news-anchor-sets-off-alexa-devices-around-san-diego-ordering-unwanted-dollhouses/



Frenemies List

Your JoeDog has been following the President-elect on Twitter for quite some time. He’s a Howard Stern fan and Trump was part of the Howard Stern universe. Then something unexpected happened to this frequent Stern Show guest. He won the presidency. Yep, saw that coming….

So while it’s now possible that a tweet from atop a gilded toilet could touch off a nuclear holocaust and get us all killed, there another more awesome possibility. See, Your JoeDog’s greatest disappointment was his exclusion from Richard Nixon’s Enemies List. He was very young when Nixon left office but that guy was assholish enough to put a child on his Enemies List. It could have happened! Sadly, it never happened. Now according to news reports, Trump blocks people from his Twitter feed. That’s the contemporary equivalent to an Enemies List. Could Your JoeDog get himself blocked???

Now anyone can get on the Presidential Twitter feed and throw some F-bombs and get himself blocked. I was determined to play it clean. Full-frontal snark! I wanted blocked for getting under his skin, like Nixon’s enemies got under his. So how’s that effort going? Sadly, not so good….

It probably wasn’t an intern who liked that tweet. This appeared in my notifications while Trump was in the midst of a Tweet storm. He was probably scrolling replies and read the first part of a compound thought. “You won the Electoral College by a landslide…” LIKE “… if by ‘landslide’ you mean ‘one of the all time slimmest margins’.” Attention to detail isn’t a trait Americans look for in a President.

You can follow Your JoeDog’s attempts to get blocked by the 45th President @jeffyguy

 



The Mightiest of Passwords

Well at least it wasn’t Runner1234, amirite?

 

I do. Sorry been moving. Just in case Milia hasn't gotten it to you let:


Apple ID:

[email protected]

Runner4567