Archive

General * Good news from Microsoft - they appear to have learnt from the incident of CoPilot accessing confidential email. Microsoft is expanding data loss prevention (DLP) controls to block the Microsoft 365 Copilot AI assistant from processing confidential Word, Excel, and PowerPoint documents, regardless of their location. ... Once the change

General * More from Brian Krebs - Starkiller Phishing as a Service. They're using in-URL authentication to trick users into thinking it's the legitimate site (using the legitimate site's domain as the username - hxxp://username:password@site/). It's also proxying the real

General * Slow, but inexorable - arrested in May 2024 for identity theft and wire fraud - in support of North Korean IT workers - now sentenced to 5 years in jail. As hinted by the article - Didenko was arrested the same month that an Arizona woman was charged with

General * Microsoft Device Code vishing...without the infrastructure? BleepingComputer has learned from multiple sources that threat actors have begun using vishing social engineering attacks that no longer require attacker-controlled infrastructure, instead leveraging legitimate Microsoft login forms and standard device code authentication workflows to breach corporate accounts. A device code phishing

General * Potential court battle brewing - a Spanish court has ruled that two VPN providers - NordVPN and ProtonVPN - must block access to unauthorised streaming sites for football matches (LaLiga). Neither VPN provider was given the opportunity to appear in court, and appear not to have received any formal

General * Some retro-vibes with 'GRIMBOLT' the replacement for 'BRICKSTORM' malware. Starting with a "Hardcoded Credential Vulnerability" to malware packed using UPX (Ultimate Packer for eXecutables) - tricks dating back to 2009/2010 Stuxnet. Interesting tricks including adding new NICs (Network Interface Controllers) to virtual

General * Trying to extort the Dutch police might backfire, when they already know who you are? The incident began when the man contacted police on February 12 about images he had that may be relevant to an ongoing investigation. An officer responded to his inquiry but, instead of sending a

General * Snail-Mail Phishing for crypto-currency hardware wallets. Some effort has gone into creating letters and branded envelopes, pretending to be from Trezor and Ledger, aimed at stealing wallet details and recovery phrases. * https://www.bleepingcomputer.com/news/security/snail-mail-letters-target-trezor-and-ledger-users-in-crypto-theft-attacks/ * Continuing the phishing crypto-currency theme - a JavaScript variant of the

General * [RU] Continuing from their block on Telegram, it appears that Roskomnadzor is now blocking WhatsApp as well. Other services may also have been included in the latest block, including other Meta products (Facebook, Instagram), YouTube, as well as news sites. Kremlin spokesperson Dmitry Peskov said the restrictions were imposed

General * Brian Krebs is continuing his series on the Kimwolf botnet. The botnet has now added I2P (The Invisible Internet Project) support, however it's overwhelming the I2P network. “I don’t think their goal is to take I2P down,” he said. “It’s more they’re looking for