- Malware Tunneling Data and Commands Over DNS to Bypass Firewalls
Adversaries can tunnel command and control traffic through DNS queries to bypass firewalls, even when environments restrict outbound DNS to trusted servers. Tools like dnscat2 demonstrate how easily...
- Tools Generating Domain Variations Used in Phishing
The lookalike domains attackers will use against your brand are mostly predictable from a small set of mutation rules like bit flips, vowel swaps, IDN homographs, and missing dots. Free tools can...
- Malware Analysis Version 6 Release of the REMnux Linux Distro for Malware Analysis
REMnux v6 updates existing malware analysis tools and introduces new ones including pedump, VolDiff, Rekall, oletools, and Docker support. Built on Ubuntu 14.04 64-bit with Debian packages, users can...
- Social Engineering Website Backup Company's Misleading "Invoices" Suggest a Scam
A letter built to look like an invoice can get a business to pay for a service it never ordered. WebsiteBackup mailed these letters, skipping the legally required 'this is not a bill' notice and...
- Social Engineering Conversation With a Tech Support Scammer
This tech support scam used no malware, just a calm sales pitch built on legitimate tools and fake diagnostics. Each step sounded like helpful advice, which is what made the pitch work.
- Social Engineering The Manipulative Nature and Mechanics of Visitor Survey Scams
A 'free reward' survey scam doesn't care how you answer its questions. Filling them out makes you invested enough to pay a small 'shipping fee' you would otherwise refuse.