Threat Level: green Handler on Duty: Russ McRee

SANS ISC: InfoSec Handlers Diary Blog - In short InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

In short

Published: 2008-03-24
Last Updated: 2008-03-24 10:18:07 UTC
by Mark Hofman (Version: 1)
0 comment(s)

A few things to look out for after the weekend.

  • Ken mentioned that he saw an uptick in port 139 traffic over the weekend.  The Dshield data supports this and also shows a spike in port 139 traffic on the 22nd.  Port 139 is always busy, but it may be prudent to pay it some extra attention.
  • In Oceania, Phising attacks have changed.  Rather than the usual security upgrade, the message invites the user to answer a survey with 1 in 10 winning a Sony Laptop.  Needless to say the first thing you have to do is enter all your details. 
  • Over the last week or two there have been more instances of the Death Threat SPAM emails.  These particularly nasty messages explain how someone you know wants you dead and the hired killer is contacting you to make a deal.  These can be very upsetting for the recipient.  Whilst they are typically spam messages treat them seriously and report them if you feel it is necessary. 

Other than that it is business as usual, PHP injection attacks, Malicious javascript.  The usual.

Cheers

Mark.

 

Keywords:
0 comment(s)
Diary Archives