From lolly pops to afterglow
For those of you who are as many in years as some of the ISC handlers, you may remember that Kojak star Telly Savalas had a singing career as well as one playing a lollypop sucking cop in New York. He had a UK number 1 hit for the song "If" which had the immortal lyrics
"If a picture paints a thousand words,
Then why can't I paint you?"
Well in the security world we are following the lyrics of David Gates and using visualisation as a powerful technique in security log analysis.
The Davix Live CD distribution has been released and it contains a wide selection of security tools which are categorised in the Capture, Process and Visualise groups.
If you are interested in the power of Visualisation techniques in security analysis, it is well worth a look.
Alex and Mark get the girls
Well as Blackhat and Defcon come to a close today in Vegas, some of the presentations are surfacing on the web. One which is already rightly attracting some interest is "How To Impress Girls With Browser Memory Protection Bypasses" by Alexander Sotirov and Mark Dowd.
You can catch up with the presentation if you missed out on the Vegas heat by jumping across to their site.
Fake IE 7 update spam doing the rounds
A number of readers have alerted us to a round of IE7 update spam being sent out. The e-mails read:
You are receiving this e-mail because you subscribed to MSN Featured Offers.
Microsoft respects your privacy. If you do not wish to receive this MSN Featured
Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe
you from e-mail communications from third-party advertisers that may appear in MSN
Feature Offers. This shall not constitute an offer by MSN. MSN shall not be
responsible or liable for the advertisers' content nor any of the goods or service
advertised. Prices and item availability subject to change without notice.
Well, true enough Microsoft will not be responsible as its not from them! (Shock / Horror).
For the sample we received, VT has good coverage:
http://www.virustotal.com/analisis/18b97fb3bc30251051a8542a90401b6f
Comments
Anonymous
Dec 3rd 2022
9 months ago
Anonymous
Dec 3rd 2022
9 months ago
<a hreaf="https://technolytical.com/">the social network</a> is described as follows because they respect your privacy and keep your data secure. The social networks are not interested in collecting data about you. They don't care about what you're doing, or what you like. They don't want to know who you talk to, or where you go.
<a hreaf="https://technolytical.com/">the social network</a> is not interested in collecting data about you. They don't care about what you're doing, or what you like. They don't want to know who you talk to, or where you go. The social networks only collect the minimum amount of information required for the service that they provide. Your personal information is kept private, and is never shared with other companies without your permission
Anonymous
Dec 26th 2022
9 months ago
Anonymous
Dec 26th 2022
9 months ago
<a hreaf="https://defineprogramming.com/the-public-bathroom-near-me-find-nearest-public-toilet/"> nearest public toilet to me</a>
<a hreaf="https://defineprogramming.com/the-public-bathroom-near-me-find-nearest-public-toilet/"> public bathroom near me</a>
Anonymous
Dec 26th 2022
9 months ago
<a hreaf="https://defineprogramming.com/the-public-bathroom-near-me-find-nearest-public-toilet/"> nearest public toilet to me</a>
<a hreaf="https://defineprogramming.com/the-public-bathroom-near-me-find-nearest-public-toilet/"> public bathroom near me</a>
Anonymous
Dec 26th 2022
9 months ago
Anonymous
Dec 26th 2022
9 months ago
https://defineprogramming.com/
Dec 26th 2022
9 months ago
distribute malware. Even if the URL listed on the ad shows a legitimate website, subsequent ad traffic can easily lead to a fake page. Different types of malware are distributed in this manner. I've seen IcedID (Bokbot), Gozi/ISFB, and various information stealers distributed through fake software websites that were provided through Google ad traffic. I submitted malicious files from this example to VirusTotal and found a low rate of detection, with some files not showing as malware at all. Additionally, domains associated with this infection frequently change. That might make it hard to detect.
https://clickercounter.org/
https://defineprogramming.com/
Dec 26th 2022
9 months ago
rthrth
Jan 2nd 2023
8 months ago