ISC Stormcast For Monday, June 1st, 2026 https://isc.sans.edu/podcastdetail/9952, (Mon, Jun 1st) 2026-6-1 02:0:2 | 阅读: 73 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu teaching isc johannes brad diary

Unidentified RAT pushes NetSupport RAT, (Mon, Jun 1st) IntroductionThis diary provides indicators from an unidentified RAT infection on Wednesday 2026-0... 2026-6-1 00:2:30 | 阅读: 92 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu netsupport c2 hxxps smartapesg

YARA-X 1.17.0 Release, (Sun, May 31st) 2026-5-31 16:1:29 | 阅读: 43 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu didier stevens 2026 teaching

ISC Stormcast For Friday, May 29th, 2026 https://isc.sans.edu/podcastdetail/9950, (Fri, May 29th) 2026-5-29 02:0:2 | 阅读: 56 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes isc teaching duty 2026

Analysis of a Year of Files Uploaded to DShield Sensors, (Wed, May 27th) Using the data collected over the past year and using Kibana these two ES|QL query to summarize the... 2026-5-28 19:41:55 | 阅读: 48 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu sensor indicator dshield cowrie sensors

ISC Stormcast For Thursday, May 28th, 2026 https://isc.sans.edu/podcastdetail/9948, (Thu, May 28th) 2026-5-28 02:0:2 | 阅读: 65 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes 2026 isc feeds papers

Reconstructing an Akira Ransomware Kill Chain from Perimeter and Endpoint Logs, (Wed, May 27th) Most Akira write-ups focus on the ransom note or the encryption routine. By the time those show up... 2026-5-27 21:14:3 | 阅读: 45 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu eid 4688 windows sslvpn perimeter

ISC Stormcast For Wednesday, May 27th, 2026 https://isc.sans.edu/podcastdetail/9946, (Wed, May 27th) 2026-5-27 02:0:3 | 阅读: 66 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc teaching johannes diary stormcast

ISC Stormcast For Tuesday, May 26th, 2026 https://isc.sans.edu/podcastdetail/9944, (Tue, May 26th) 2026-5-26 02:0:2 | 阅读: 61 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu isc teaching johannes 26th diary

Possible ACR Stealer From Page Impersonating Claude, (Tue, May 26th) IntroductionIn recent weeks, I've searched for pages impersonating Claude that distribute malware... 2026-5-26 00:1:48 | 阅读: 67 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu download hxxps windows claude

Microsoft Access VBA, (Mon, May 25th) Microsoft Access files (Microsoft Office's Database) can contain VBA code.But they are not ole or... 2026-5-25 14:14:58 | 阅读: 58 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu ole microsoft diary ooxml database

TeamPCP Supply Chain Campaign: Activity Through 2026-05-24, (Mon, May 25th) TeamPCP now operates across three package ecosystems in parallel, it reached GitHub's own internal... 2026-5-25 13:26:6 | 阅读: 60 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu github 2026 microsoft publisher malicious

TeamPCP Supply Chain Campaign: Activity Through 2026-05-24, (Mon, May 25th) TeamPCP now operates across three package ecosystems in parallel, it reached GitHub's own internal... 2026-5-25 13:25:47 | 阅读: 55 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu github 2026 microsoft publisher malicious

Wireshark 4.6.6 Released, (Sun, May 24th) Published: 2026-05-24. Last Updated: 2026-05-24 16:38:21 UTCby Didier Stevens (Version: 1)Wiresh... 2026-5-24 16:38:21 | 阅读: 55 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 2026 didier stevens windows npcap

An Example of Stack String in High Level Language, (Sat, May 23rd) This week, I’m attending the SEC670[1] training (“Red Teaming Tools - Developing Windows Implants,... 2026-5-23 05:49:17 | 阅读: 55 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu 0x63 0x74 spot 0x6f 0x2f

Cross-Platform NPM Stealer, (Fri, May 22nd) I found a Node.js stealer that looked pretty well obfuscated. The file was not running out-of-the-b... 2026-5-22 06:14:42 | 阅读: 59 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu phrase opera chrome backup axios

ISC Stormcast For Friday, May 22nd, 2026 https://isc.sans.edu/podcastdetail/9942, (Fri, May 22nd) 2026-5-22 02:0:2 | 阅读: 45 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes isc teaching kopriva

Selective HTTP Proxying in Linux, (Thu, May 21st) Recently, Rob wrote about a tool, Proxifier, that can intercept requests from specific processes. P... 2026-5-21 13:34:9 | 阅读: 52 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu software proxy network proxifier processes

ISC Stormcast For Thursday, May 21st, 2026 https://isc.sans.edu/podcastdetail/9940, (Thu, May 21st) 2026-5-21 02:0:3 | 阅读: 61 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu johannes isc teaching diary

ISC Stormcast For Wednesday, May 20th, 2026 https://isc.sans.edu/podcastdetail/9938, (Wed, May 20th) 2026-5-20 02:0:2 | 阅读: 56 | 收藏 | SANS Internet Storm Center, InfoCON: green - isc.sans.edu teaching isc johannes