Malware News
16.2K subscribers
1.64K photos
7 videos
130 files
8.3K links
The latest NEWS about malwares, DFIR, hacking, security issues, thoughts and ...

Partner channel: @cveNotify

For ads: https://telega.io/c/malwr
Download Telegram
Automate Google Maps API keys analysis
🗣marduc812

Nice work! Wonder if these are generally addressed with adding the signature? Does generating the signature at scale (like uber) cause any noticable reduction in response time?

Cheers!
👤theappanalyst


🎖@malwr
Hosted Exchange to Microsoft 365 migration - How To
I am doing my best to learn how to migrate Hosted Exchange to Microsoft 365. I have found a few resources helpful:

https://docs.microsoft.com/en-us/exchange/mailbox-migration/cutover-migration-to-office-365

https://www.quadrotech-it.com/blog/how-to-migrate-exchange-to-office-365-step-by-step-part-1/

https://www.quadrotech-it.com/blog/how-to-migrate-exchange-to-office-365-step-by-step-part-2/

https://www.youtube.com/watch?v=BwbFUtL9AIE

Anyone out there have any experience or resources they would like to share that were helpful?

I want to be sure when I attempt this I have a solid understanding on what is suppose to happen.
🗣Failed2FixThisThing

No idea why anyone would pay for tools like MigrationWiz or BitTitan when they don't offer any value on top of the FREE tools available to you from Microsoft that do the exact same thing

Works well for us and saved us ££££

https://docs.microsoft.com/en-us/exchange/mailbox-migration/cutover-migration-to-office-365
👤d4ngerm0use

Big fan of Audriga. Germany based company with great support.
👤hasKo91

Hybrid is easy.. its almost all wizard these days.
We’ve done a few hundred server migrations.. thousands of mailboxes.

Bittitan is good but not needed for same domain migrations. I did use it for a gmail to 365 migration last week though.
👤capturedlight77


🎖@malwr
At Least 30,000 U.S. Organizations Newly Hacked Via Holes in Microsoft’s Email Software
🗣digicat

Glad ours is not exposed to the internet.
👤phl23

For anyone who is having to investigate older systems to see if they’ve been affected, this GitHub has a list of the valid files (& hashes) from an Exchange 2010 box to help with webshell detection: GitHub|PwnDefend|Exchange2010 Hashes
👤TroublingName

And patching it is proving to be a real son of a bitch.
👤bolunez


🎖@malwr
retoolkit - offline installer containing many reversing tools
🗣nandu88

As long as you’re working on Windows...
I’m not objecting to the fact it’s a Windows collection, just the fact that neither the Project nor the README think it worth mentioning...
👤gwynevans

It would be nice to have a table comparing installed tools between this one and flare vm.
👤movr0spblxr2

Is it safe to install...i don’t know. Haha...love it.
👤earthmisfit


🎖@malwr
The Wine development release 6.4 is now available.
🗣_-ammar-_

What's new in this release (see below for details):

\- Support for the DTLS protocol.

\- Fontset support in DirectWrite.

\- Dialog for editing Access Control entries.

\- Theming support for a few more common controls.

\- Support for Korean Wansung encoding. - Various bug fixes.


7416 Support multiple independent displays for PowerPoint, OpenOffice.org, etc
16676 RTG Bills 2.x (VB6 app) reports 'ADO error 1BD Object doesn't support this action' on startup (msado15 'connectionGetIDsOfNames' is a stub)
25323 Civilization IV Beyond the Sword crashed when trying to start a new game.
31814 Gecko should clean up when upgrading
36463 wine can't load unstripped gecko builds
36697 64-bit InstallShield engine COM server 'ISBEW64.exe' crashes or hangs (32-bit InstallShield based installers in 64-bit WINEPREFIX)
37011
acid3.acidtests.org can't load with builtin IE
38744 support
UNITYNETWORKAREAREGION
39381 32-bit Turbocad 8.0 LTE 'CrashSender.exe' utility crashes in WMI Query "SELECT * FROM Win32
NetworkAdapterConfiguration where IPEnabled='True' and index=1"
41433 Acrobat Reader XI (11.0.8): Annotations are empty
42827 Canon MP Navigator EX 4.x/5.x installer crashes due to setupapi SPFILENOTIFYFILEINCABINET handler/callback insufficiencies
46969 Multiple 64-bit WDM kernel drivers want Windows 8+ 'ntdll.RtlQueryRegistryValuesEx' (WIBUKEY, Denuvo Anti-Cheat)
48127 Soldiers of Anarchy (demos & full game
1.1.2.178), crashes with an 'Unknown error' message when starting a level
48879 NVIDIA PhysX System Software 9.12.1031 installer fails ('Add64Bit
Reg' VBScript action needs minimal 'WbemScripting.SWbemNamedValueSet' implementation)
49531 Multiple Qt5 applications spam the console continuously with 'fixme:netprofm:connectionGetAdapterId' ('INetworkConnection::GetAdapter' returns incorrect adapter GUID)(Futubull 10.x, Melodics V2, Topaz Video Enhance AI 1.x)
49830 Obduction stops with "fatal error"
49998 widl doesn't support winrt types (runtimeclass, delegate, parameterized types, ...)
50123 The Elder Scrolls V: Skyrim SE has rendering glitches with vulkan renderer
50263 Entropia Universe: Won't Start the Game from Client Loader
50377 Banished cast shadows are broken with Vulkan renderer
50422 Multiple games (Horizon Zero Dawn, Serious Sam 4) crash on start on Nvidia due to missing unwrap for VK
OBJECTTYPESURFACEKHR
50563 The Witcher 3: Wild Hunt has missing sunlight with Vulkan renderer
50632 Neverwinter: Broken graphics (texturing)
50641 Wine cmd handles incorrectly if-for on a single line
50642 Wine cmd handles incorrectly if-set when expanding variable with brackets
50667 Final Fantasy XI Online: Opening movie doesn't play (redux).
50678 Filmotech v3.91: partial black area
50698 ::wcsrtombs does not NULL "const wchar
t PSource" parameter in Wine.
50704 QueueUserAPC() Has Incorrect Error Set When Called On Terminating Thread
50706 6.2 hangs on grey, then crashes Snapdragon855(+) Android 10
50731 All Winelib applications built with winegcc/wineg++ segfault on startup as of Wine 6.3
50732 Multiple Adobe products fail to start due to Wine 6.3 breaking Adobe License Manager/FLEXnet Licensing Service (Acrobat 8.x, FrameMaker 8)
50740 The Suffering (Midway Games) crashes due to missing wmvcore 'IWMSyncReader2', CLSID '{faed3d21-1b6b-4af7-8cb6-3e189bbc187b}'
50744 continuous spamming of fixme:msctf:InputProcessorProfileMgr
GetActiveProfile in console
50769 notepad: menu bar items and title text are not translated.
50774 DirectWrite should use mac platform name entry for English, if Windows entry is missing
50781 cl.exe fails to open program database
50786 WINEPATH env var broken by "ntdll: Set environment variables from the registry on the Unix side.
👤_-ammar-_


🎖@malwr
Reverse Engineering Microsoft Exchange DearCry Ransomware | Brief Analysis
🗣MotasemHa

Two suggestions: get a better mic. Sometimes your voice sounds muffled. It’s not your accent, I’m spanish and I have a good ear for accents but your voice doesn’t come in clear.
Second: you need to zoom in because if someone is watching on a phone, we cannot see what you are seeing. It just looks like blobs to me. I wish I could understand what you are doing because I want to learn, but I just can’t from what you posted. Your set up looks nice but it needs to be edited to show code bigger. I understand if you see this on a computer you can see it big but not everyone is on a computer 24/7.
👤Simsimma76


🎖@malwr