Chinese Bitcoin investor loses $45 million to a SIM-Swapping attack.
🗣nilehighclub
SIM Swapping is stupid easy too, that’s why this is a rampant issue - all it takes is someone inside the carrier (and not even a high ranking person)
👤mc2memes
These sort of attacks are just stunning.
I still have not really worked out how they manage to steal a persons phone number.
I guess they gain a lot of information about a person so they can answer any question an ISP may ask. Or is it simply the fact that ISP's have basically no security built into their processes?
👤VestigialHead
You keep 45 million on something protected by an sms on a phone.... you’re an idiot
👤EAP007
🎖@malwr
🗣nilehighclub
SIM Swapping is stupid easy too, that’s why this is a rampant issue - all it takes is someone inside the carrier (and not even a high ranking person)
👤mc2memes
These sort of attacks are just stunning.
I still have not really worked out how they manage to steal a persons phone number.
I guess they gain a lot of information about a person so they can answer any question an ISP may ask. Or is it simply the fact that ISP's have basically no security built into their processes?
👤VestigialHead
You keep 45 million on something protected by an sms on a phone.... you’re an idiot
👤EAP007
🎖@malwr
X (formerly Twitter)
X
Binwalk
I've figured out how and when exactly to use Binwalk on files (JPG files for example, steganography).
But what is exactly Binwalk? How does it show me more files inside a file?
How does it work?
🗣blue8ird
It looks for file format signatures and for file headers/footers of different formats.
Btw a more common use case than steganography is extracting files from a firmware image.
👤Tompazi
🎖@malwr
I've figured out how and when exactly to use Binwalk on files (JPG files for example, steganography).
But what is exactly Binwalk? How does it show me more files inside a file?
How does it work?
🗣blue8ird
It looks for file format signatures and for file headers/footers of different formats.
Btw a more common use case than steganography is extracting files from a firmware image.
👤Tompazi
🎖@malwr
reddit
Binwalk
I've figured out how and when exactly to use Binwalk on files (JPG files for example, steganography). But what is exactly Binwalk? How does it...
I just open-sourced sweetie data, a repo of multiple honeypot logs.
🗣0xsha
Nice thanks for sharing. I've shut down the majority of my honeypots and just use threat feeds and other intelligence streams.
👤intoxicatednoob
🎖@malwr
🗣0xsha
Nice thanks for sharing. I've shut down the majority of my honeypots and just use threat feeds and other intelligence streams.
👤intoxicatednoob
🎖@malwr
GitHub
GitHub - 0xsha/sweetie-data: This repo contains logstash of various honeypots
This repo contains logstash of various honeypots. Contribute to 0xsha/sweetie-data development by creating an account on GitHub.
[PDF] OSS Supply Chain Security by the Linux Foundation
https://www.linuxfoundation.org/wp-content/uploads/2020/02/oss\_supply\_chain\_security.pdf
🗣digicat
🎖@malwr
https://www.linuxfoundation.org/wp-content/uploads/2020/02/oss\_supply\_chain\_security.pdf
🗣digicat
🎖@malwr
Workshop on Binary Analysis Research (BAR) 2020 at NDSS
🗣mttd
It would be nice to have the slides of the invited talks as well.
👤XVilka
🎖@malwr
🗣mttd
It would be nice to have the slides of the invited talks as well.
👤XVilka
🎖@malwr
ObliqueRAT, a new malware employed in attacks on government targets in Southeast Asia
🗣quellaman
🎖@malwr
🗣quellaman
🎖@malwr
Security Affairs
ObliqueRAT, a new malware employed in attacks on government targets
Cisco Talos researchers discovered a new malware, tracked as ObliqueRAT, that was employed targeted attacks against organizations in Southeast Asia.