Diaries by Keyword - SANS Internet Storm Center

Handler on Duty: Didier Stevens

Threat Level: green

Date	Author	Title
2023-05-30	Johannes Ullrich	Your Business Data and Machine Learning at Risk: Attacks Against Apache NiFi
2023-01-02	Xavier Mertens	NetworkMiner 2.8 Released
2022-04-05	Johannes Ullrich	WebLogic Crypto Miner Malware Disabling Alibaba Cloud Monitoring Tools
2021-12-21	Xavier Mertens	More Undetected PowerShell Dropper
2021-03-19	Xavier Mertens	Pastebin.com Used As a Simple C2 Channel
2020-11-07	Guy Bruneau	Cryptojacking Targeting WebLogic TCP/7001
2020-02-02	Didier Stevens	Video: Stego & Cryptominers
2019-12-26	Xavier Mertens	Bypassing UAC to Install a Cryptominer
2019-04-02	Johannes Ullrich	Fake AV is Back: LaCie Network Drives Used to Spread Malware
2019-01-10	Brad Duncan	Heartbreaking Emails: "Love You" Malspam
2019-01-02	Xavier Mertens	Malicious Script Leaking Data via FTP
2018-11-30	Remco Verhoef	CoinMiners searching for hosts
2018-09-07	Xavier Mertens	Crypto Mining in a Windows Headless Browser
2018-08-30	Xavier Mertens	Crypto Mining Is More Popular Than Ever!
2018-07-13	Xavier Mertens	Cryptominer Delivered Though Compromized JavaScript File
2018-03-05	Xavier Mertens	Malicious Bash Script with Multiple Features
2018-03-04	Xavier Mertens	The Crypto Miners Fight For CPU Cycles
2017-11-13	Guy Bruneau	VBE Embeded Script (info.zip)
2017-09-30	Lorna Hutcheson	Who's Borrowing your Resources?
2017-01-12	Mark Baggett	Some tools updates
2016-11-13	Guy Bruneau	Bitcoin Miner File Upload via FTP
2014-07-07	Johannes Ullrich	Multi Platform *Coin Miner Attacking Routers on Port 32764
2014-04-01	Johannes Ullrich	cmd.so Synology Scanner Also Found on Routers
2013-12-16	Tom Webb	The case of Minerd
2009-11-25	Jim Clausing	Tool updates