DFIR News (@DFIRNews) header
DFIR News (@DFIRNews) profile picture

DFIR News

@DFIRNews

The Latest in Digital Forensics and Incident Response #DFIR #Forensics #IR #4n6

 New York, USA
Joined December 2018
  • Tweets8.6K
  • Following106
  • Followers715
Steganography Anchors Pinpoint Attacks on Industrial Targets via ThreatPost | #DFIR #CyberSecurity threatpost.com/steganography…
1
NSA Warns of Sandworm Backdoor Attacks on Mail Servers via ThreatPost | #DFIR #CyberSecurity threatpost.com/nsa-sandworm-…

NSA Warns of Sandworm Backdoor Attacks on Mail Servers

The Russian spy group, a.k.a. BlackEnergy, is actively compromising Exim mail servers via a critical security vulnerability.

threatpost.com
1
‘Hack-For-Hire’ Firms Spoof WHO To Target Google Credentials via ThreatPost | #DFIR #Google #CyberSecurity threatpost.com/hack-hire-spo…

‘Hack-For-Hire’ Firms Spoof WHO To Target Google Credentials

Google TAG report reveals that "hack for hire" firms are tapping into the coronavirus pandemic via WHO phishing lures.

threatpost.com
Inside the Hoaxcalls Botnet: Both Success and Failure via ThreatPost | #DFIR #ThreatIntel #Botnet threatpost.com/inside-hoaxca…

Inside the Hoaxcalls Botnet: Both Success and Failure

The DDoS group sets itself apart by using exploits — but it doesn't always pan out.

threatpost.com
PonyFinal Ransomware Targets Enterprise Servers Then Bides Its Time via ThreatPost | #DFIR #Malware #ThreatIntel threatpost.com/ponyfinal-ran…
1
1
DoubleGun Group Builds Massive Botnet Using Cloud Services via ThreatPost | #DFIR #Cloud #ThreatIntel #Botnet threatpost.com/doublegun-mas…

DoubleGun Group Builds Massive Botnet Using Cloud Services

The latest campaign spread malware via pirate gaming portals.

threatpost.com
1
‘[F]Unicorn’ Ransomware Impersonates Legit COVID-19 Contact-Tracing App via ThreatPost | #DFIR #Malware #ThreatIntel threatpost.com/funicorn-rans…
Hackers Sell Data from 26 Million LiveJournal Users on Dark Web via ThreatPost | #DFIR #CyberSecurity threatpost.com/hackers-sell-…

Hackers Sell Data from 26 Million LiveJournal Users on Dark Web

Passwords and other credentials have been listed on Have I Been Pwned as attack rumors circulate.

threatpost.com
New iOS Jailbreak Tool Works on iPhone Models iOS 11 to iOS 13.5 via ThreatPost | #DFIR #Tools threatpost.com/new-ios-jailb…

New iOS Jailbreak Tool Works on iPhone Models iOS 11 to iOS 13.5

Latest version of UnC0ver uses unpatched zero-day exploit to take complete control of devices, even those running iOS 13.5.

threatpost.com
Windows 10 adds new security and privacy features in May update via Naked Security | SOPHOS | #DFIR #Privacy nakedsecurity.sophos.com/202…
2
1
Google sued by Arizona for tracking users’ locations in spite of settings via Naked Security | SOPHOS | #DFIR #Google nakedsecurity.sophos.com/202…
1
Inside a ransomware gang’s attack toolbox via Naked Security | SOPHOS | #DFIR #Malware #CyberSecurity #ThreatIntel nakedsecurity.sophos.com/202…
1
S2 Ep 41: Super-sized ransomware, FBI v Apple and AirPods hot or not – Naked Security Podcast via Naked Security | SOPHOS | #DFIR #Malware #ThreatIntel nakedsecurity.sophos.com/202…
2
26 IoT Flaws Enable Denial-of-Service Attacks, Privilege Escalation via DarkReading.com | #DFIR #Vulnerability #IoT #CyberSecurity darkreading.com/iot/26-iot-f…
India’s popular BHIM payments platform reportedly leaks 7M users’ data (UPDATED with NPCI denial) via DataBreaches.net | #DFIR #InfoSec #DataBreach databreaches.net/indias-popu…
Rare NSA Advisory About Russia-Based Cyberattacks Unlikely to Stop Them via DarkReading.com | #DFIR #CyberSecurity darkreading.com/attacks-brea…
2
1
And Now, for Something Awesome... SANS Launches New Series of Worldwide Capture-the-Flag Cyber Challenges via SANS | Digital Forensics | #DFIR #CyberSecurity sans.org/blog/and-now-for-so…

And Now, for Something Awesome: SANS Launches New Series of Worldwide Capture-the-Flag Cyber...

Challenge yourself with free virtual opportunities for learning and upskilling from the SANS Institute with NetWars and SANS Community CTFs.

sans.org
3
Apple Pays $100K Bounty for Critical ‘Sign in With Apple’ Flaw via ThreatPost | #DFIR #Vulnerability threatpost.com/apple-100k-bo…

Apple Pays $100K Bounty for Critical 'Sign in With Apple' Flaw

Apple has fixed a critical flaw in its Sign in with Apple feature, which could have been abused by attackers to takeover victims' third-party applications.

threatpost.com
1
Minneapolis Police Department Hack Likely Fake, Says Researcher via ThreatPost | #DFIR #CyberSecurity threatpost.com/anonymous-hac…

Minneapolis Police Department Hack Likely Fake, Says Researcher

Troy Hunt said that the supposed data breach perpetrated by Anonymous is most likely a hoax.

threatpost.com
Hosting Provider’s Database of Crooked Customers Leaked via ThreatPost | #DFIR #InfoSec #DataBreach threatpost.com/hosting-provi…

Hacker Leaks Database of Free Dark-Web Hosting Provider

Database of sensitive info, including emails and passwords, from owners of Daniel’s Hosting portals could be incriminating.

threatpost.com
Load more