Daniel

@dansomware.bsky.social

threat research @ proofpoint

People find hope in all kinds of places. Herschel Walker is going to be named ambassador to the Bahamas in place of being in charge of US missile defense.

In December 11 and 12, 2024, a spearphishing campaign targeted at least 20 Autonomous System (AS) owners, predominantly Internet Service Providers (ISPs), and purported to come from the Network Operations Center (NOC) of a prominent European ISP. 🧵⤵️

StrikeReady Labs @strikereadylabs.com · 2y ago

Interesting susp targeted phish targeting an Italian telecom. 1) spoofing swisscom (note 'S', domain just reg'd) 2) leveraging encrypted rar + lnk + self signed pdf reader 3) BGP lure (fits with theme of email). BGP is the third leg in the outage triumvirate)

"The flow uses a documented execution hijack of IE4uinit. By supplying a “side-loaded” .inf file to IE4uinit, it can be used to load and execute COM scriptlets..." 🌟New report out Monday, December 2nd by @_pete_0, @svch0st and guest contributor @k3dg3 from @proofpoint!

Bild