This media is not supported in your browser
VIEW IN TELEGRAM
π Glad to present the new release zDNS v0.1.3! π
Following Zero Trust practices, I recently wrote and am slowly beginning to introduce new βblackholeβ functionality into the OpenBLD.net DNS ecosystem
zDNS is a DNS server that puts security and control over DNS queries at the center. With new functionality, zDNS now supports regular expressions in hosts.txt files, allowing more flexibility in configuring allowed queries. Now you can use the power of regular expressions to precisely control permissions, including subdomains and patterns.
Main features:
π Denies all DNS queries by default.
β Allows you to configure allowed requests through the hosts.txt file.
π Uses balancing strategies to ensure reliable operation with DNS servers.
π Easily customizable via YAML configuration.
π Prometheus metrics coming soon
Additional protection of your infrastructure or testing requests with zDNS is possible and may be useful to you! Download the latest version here and start using a DNS server with powerful customization options:
https://github.com/m0zgen/zdns/tree/dev
#zDNS #DNS #Security #Release #News
Following Zero Trust practices, I recently wrote and am slowly beginning to introduce new βblackholeβ functionality into the OpenBLD.net DNS ecosystem
zDNS is a DNS server that puts security and control over DNS queries at the center. With new functionality, zDNS now supports regular expressions in hosts.txt files, allowing more flexibility in configuring allowed queries. Now you can use the power of regular expressions to precisely control permissions, including subdomains and patterns.
Main features:
π Denies all DNS queries by default.
β Allows you to configure allowed requests through the hosts.txt file.
π Uses balancing strategies to ensure reliable operation with DNS servers.
π Easily customizable via YAML configuration.
π Prometheus metrics coming soon
Additional protection of your infrastructure or testing requests with zDNS is possible and may be useful to you! Download the latest version here and start using a DNS server with powerful customization options:
https://github.com/m0zgen/zdns/tree/dev
#zDNS #DNS #Security #Release #News
π4
Letβs Get Ready to Rumble!!
Let the leap yearπ bring only high profits and high success!)) Peace βοΈ
Let the leap year
Please open Telegram to view this post
VIEW IN TELEGRAM
β€1
Open Thank You Message.
First of all, thanks to all users of the OpenBLD.net service. Thank you for trusting, service using, contributing and providing feedback.
Some companies, like the people in them, also trust the service and support it with system resources and OSS licenses, which allows the service to grow, be faster, and expand points of presence around the world.
Thanks everyone. I also wrote an Open Tnak You Letter in my blog post to everyone who supported.
Everyone who wants to support, add their logo or name to the project website, support the OpenBLD.net project and receive this benefits.
Peace to all βοΈ
First of all, thanks to all users of the OpenBLD.net service. Thank you for trusting, service using, contributing and providing feedback.
Some companies, like the people in them, also trust the service and support it with system resources and OSS licenses, which allows the service to grow, be faster, and expand points of presence around the world.
Thanks everyone. I also wrote an Open Tnak You Letter in my blog post to everyone who supported.
Everyone who wants to support, add their logo or name to the project website, support the OpenBLD.net project and receive this benefits.
Peace to all βοΈ
π5β€2
Deceptive Lumma Variant Spreads Distributed on YouTube
Lumma stealer variant and attack method via YouTube, has been known for some time, this stealer targets sensitive information, including user credentials, system details, browser data, and extensions.
The crafted installation ZIP file serves as an effective bait to deliver the payload, exploiting the user's intention to install the application and prompting them to click the installation file without hesitation. URLs from open-source websites throughout the scheme aim to diminish user awareness.
This stealer collect also telemetry! And now it's blocked in OpenBLD.net
Now you are an informed, dear OpenBLD user and hope you will be more careful with YouTube content in the future)
How to get started use OpenBLD.net - https://openbld.net/docs/category/get-started/
Lumma stealer variant and attack method via YouTube, has been known for some time, this stealer targets sensitive information, including user credentials, system details, browser data, and extensions.
The crafted installation ZIP file serves as an effective bait to deliver the payload, exploiting the user's intention to install the application and prompting them to click the installation file without hesitation. URLs from open-source websites throughout the scheme aim to diminish user awareness.
This stealer collect also telemetry! And now it's blocked in OpenBLD.net
Now you are an informed, dear OpenBLD user and hope you will be more careful with YouTube content in the future)
How to get started use OpenBLD.net - https://openbld.net/docs/category/get-started/
π₯°2
Please open Telegram to view this post
VIEW IN TELEGRAM
π1
New OpenBLD points of presence have been added in the world thanks to AlphaVPS!
AlphaVPS.com - Fast & Cheap VPS, Cloud Servers and few servers from AlphaVPS stay which located in Bulgaria and Germany joined in to OpenBLD.net ecosystem.
As you know one of the our prioritites - fast DoH/DoT responses and 1GBit/s from AlphaVPS it is good base for this requirements.
One server already available for users (see status of Ada-h4), second server will be available in the next few days. Enjoy it π
P.S. Few times ago I posted OpenBLD.net IPv6 Pre-Release notice, in few near weeks I'll plan implement DoH/DoT IPv6 for users in Europe, I'll tell about this later π...
Please open Telegram to view this post
VIEW IN TELEGRAM
π₯2β‘1π1
Few month ago I stared develop from scratch zDNS service, now it's can:
- Restrict DNS queries by type like as A, AAAA, HTTPS, CNAME, MX, PTR..
- Balancing DNS traffic between upstream servers
- Providing Prometheus metrics
- DNS responses caching by custom TTL
- Has few working modes - Zero Trust, Allow/Blocking
- Has separated "Permanent" mode with additional custom upstream DNS servers
- Can load allow/block lists from local and remote through HTTP(S)
- Create/Delete custom users with different configs and hosts files
- and more...
New opportunities, features, looking forward, and info about of new OpenBLD.net Personal Usage Testing pre-relase see here:
https://openbld.net/blog/zdns-big-updates-and-features/
Please open Telegram to view this post
VIEW IN TELEGRAM
π₯4
Today I blocked new SCAM company targeted to Kazakhstan.
All malicious domains sended to OpenBLD.net.
Be careful - before clink on he link, view attentively before clink ))
All malicious domains sended to OpenBLD.net.
Be careful - before clink on he link, view attentively before clink ))
π₯3π1
ΠΠΎΠ±Π΅Π΄Π° Π½Π°Π΄ ΡΠ΅ΠΊΠ»Π°ΠΌΠΎΠΉ Π½Π° Overklockers!! π
ΠΠ·ΠΌΠ΅Π½Π΅Π½ΠΈΡ ΠΏΠΎΠ΄ΠΉΠ΄ΡΡ Π² ΡΠ»Π΅Π΄ΡΡΡΠΈΠΉ ΡΠ΅Π»ΠΈΠ· Π΄ΠΎΠΏΠΎΠ»Π½Π΅Π½ΠΈΡ Chrome, ΠΊΠΎΡΠΎΡΠΎΠ΅ Google ΡΠ°Π·ΡΠ΅ΡΠΈΠ» ΡΠ°Π·ΠΌΠ΅ΡΡΠΈΡΡ ΡΠ²ΠΎΠ΅ΠΌ ΠΌΠ°Π³Π°Π·ΠΈΠ½Π΅ ΡΠ°ΡΡΠΈΡΠ΅Π½ΠΈΠΉ)))
https://chromewebstore.google.com/detail/openbldnet-blocker/jjpjcmckhkcefefgbgghomdhcbfmklea
ΠΠ·ΠΌΠ΅Π½Π΅Π½ΠΈΡ ΠΏΠΎΠ΄ΠΉΠ΄ΡΡ Π² ΡΠ»Π΅Π΄ΡΡΡΠΈΠΉ ΡΠ΅Π»ΠΈΠ· Π΄ΠΎΠΏΠΎΠ»Π½Π΅Π½ΠΈΡ Chrome, ΠΊΠΎΡΠΎΡΠΎΠ΅ Google ΡΠ°Π·ΡΠ΅ΡΠΈΠ» ΡΠ°Π·ΠΌΠ΅ΡΡΠΈΡΡ ΡΠ²ΠΎΠ΅ΠΌ ΠΌΠ°Π³Π°Π·ΠΈΠ½Π΅ ΡΠ°ΡΡΠΈΡΠ΅Π½ΠΈΠΉ)))
https://chromewebstore.google.com/detail/openbldnet-blocker/jjpjcmckhkcefefgbgghomdhcbfmklea
Please open Telegram to view this post
VIEW IN TELEGRAM
π₯3π2π1
New OpenBLD.net Chrome Extension v1.1 Released π
π‘ OpenBLD.net Blocker extension released on official Google Extension Store today
This is OpenBLD.net add-on which can block some ADS services (such as Yandex advertising) on some web resources which has HTMLembedded ads...
OpenBLD.net service+Estension Blocker - Perfect combination for reducing Internet noise π§ββοΈ
Try or Update OpenBLD.net Blocker from Official Chrome Internet Store:
https://chromewebstore.google.com/detail/openbldnet-blocker/jjpjcmckhkcefefgbgghomdhcbfmklea
Note: OpenBLD.net setup is required before using the Browser extension
Feedback is welcome! Contacts.
P.S. After an extension will update, re-enable extension is required
This is OpenBLD.net add-on which can block some ADS services (such as Yandex advertising) on some web resources which has HTMLembedded ads...
OpenBLD.net service+Estension Blocker - Perfect combination for reducing Internet noise π§ββοΈ
Try or Update OpenBLD.net Blocker from Official Chrome Internet Store:
https://chromewebstore.google.com/detail/openbldnet-blocker/jjpjcmckhkcefefgbgghomdhcbfmklea
Note: OpenBLD.net setup is required before using the Browser extension
Feedback is welcome! Contacts.
P.S. After an extension will update, re-enable extension is required
Please open Telegram to view this post
VIEW IN TELEGRAM
π₯6π2β€1
Current public OpenBLD.net status page you can see here:
- https://bld-status.sys-adm.in/
P.S. This only applies to the RIC, the ADA will work as usual
Please open Telegram to view this post
VIEW IN TELEGRAM
π₯2β€1π¨βπ»1
It is espionage software which can use trojanized messaging...
Malicious IoC domains sent to OpenBLD.net ecosystem, be careful about what is installed in your phones))
Please open Telegram to view this post
VIEW IN TELEGRAM
π2
π Exciting News Alert: zDNS > zBLD Transformation Stage
Big changes are happening at OpenBLD.net! Introducing the zDNS > zBLD Transformation Stage β a major milestone in our service evolution.
π Key Update: I'm revamping our infrastructure by transitioning all Blocky Listeners Daemons to the cutting-edge zBLD daemon, freshly built from the ground up!
π‘ Here's what you need to know:
- zDNS is now zBLD, aligning with the core focus of OpenBLD.net.
- zBLD is stepping in to replace Blocky, ushering in enhanced performance.
- Get ready for personalized DoH profiles, tailored just for you!
π Rest assured, these updates won't disrupt your experience. If anything, they'll only enhance the speed and responsiveness of OpenBLD.net.
Stay tuned for more updates as I continue to elevate your browsing experience!π
Big changes are happening at OpenBLD.net! Introducing the zDNS > zBLD Transformation Stage β a major milestone in our service evolution.
π Key Update: I'm revamping our infrastructure by transitioning all Blocky Listeners Daemons to the cutting-edge zBLD daemon, freshly built from the ground up!
- zDNS is now zBLD, aligning with the core focus of OpenBLD.net.
- zBLD is stepping in to replace Blocky, ushering in enhanced performance.
- Get ready for personalized DoH profiles, tailored just for you!
Stay tuned for more updates as I continue to elevate your browsing experience!
Please open Telegram to view this post
VIEW IN TELEGRAM
β€3π2
I have tested all changes in the testing environment - all is okay.
The main goal is to reduce/speedup DNS response time
These changes should not affect anyone, but if anyone experiences issues with OpenBLD.net, please contact me via PM.
Please open Telegram to view this post
VIEW IN TELEGRAM
π₯2π2
If anyone who are using RIC will catching any gaps, notify me please.
Please open Telegram to view this post
VIEW IN TELEGRAM
π3β€1π1
New researched malicious campaign from Proofpoint researchers, detected integrating credential phishing and cloud account takeover (ATO) techniques...
This campaign contains multiple endpoints which also included domains used as malicious infrastructure...
So - All malicious infrastructure domains sent to OpenBLD.net ecosystem
Be safe and be focused my friends
Please open Telegram to view this post
VIEW IN TELEGRAM
π1π1
After intalls, malicious software will connect to C2 command servers...
https://lab52.io/blog/pelmeni-wrapper-new-wrapper-of-kazuar-turla-backdoor/
Please open Telegram to view this post
VIEW IN TELEGRAM
π₯1
Do you want to protect your online privacy and the privacy of your family? Join the beta for OpenBLD.net Personal DoH Profiling (PDP), a new service that provides:
Benefits of PDP
How to Join the Beta
Be among the first to test OpenBLD.net PDP! Fill out the form below to get access to all features which will available in March 2024.
What's Next?
See details on OpenBLD.net here.
Please open Telegram to view this post
VIEW IN TELEGRAM
π₯4
The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) are releasing this joint CSA, to disseminate known TTPs and IOCs associated with the Phobos ransomware variants observed as recently as February 2024...
Phobos actors run executables like 1saas.exe or cmd.exe to deploy additional Phobos payloads that have elevated privileges enabled. Additionally, Phobos actors can use the previous commands to perform various windows shell functions. The Windows command shell enables threat actors to control various aspects of a system, with multiple permission levels required for different subsets of commands.
How to mitigate risks:
- Secure RDP
- Reduce administratiove provigese scoping
- Stay updated
- Use OpenBLD.net or similar services
Technical details on CISA site:
- https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-060a
Please open Telegram to view this post
VIEW IN TELEGRAM
β€1π¨βπ»1
WogRat Malware C2C / Download Prevents
While attacks against Linux have not been found, it is assumed that in the case of malware targeting Windows systems, attacks are conducted by disguising themselves as legitimate utility tools based on filenames upon collection, prompting users into downloading malware.
https://t.me/sysadm_in_channel/5057
P.S. Malware domains already sent to OpenBLD.net ecosystem
While attacks against Linux have not been found, it is assumed that in the case of malware targeting Windows systems, attacks are conducted by disguising themselves as legitimate utility tools based on filenames upon collection, prompting users into downloading malware.
https://t.me/sysadm_in_channel/5057
P.S. Malware domains already sent to OpenBLD.net ecosystem
π₯1π1
If you notice a short timeout, donβt be alarmed, it's Iβm "playing")
Please open Telegram to view this post
VIEW IN TELEGRAM
π2π1