- rwth-security - lists.rwth-aachen.de

Phishing via OpenVPN/Wireguard
by Bernd Kohler 09 Dec '24

09 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI Phishing via OpenVPN/Wireguard --> hoffen wir mal, dass Nutzende sich melden, wenn bspw. MFA nicht abgefragt wird - was ja ALLE bei VPN machen, richtig? ;) --> habe ich so aber noch nicht gesehen, aktuell "nur" PoC (gefunden via [1])? VG Bernd [0] https://github.com/CICADA8-Research/Penetration/tree/main [1] https://x.com/CICADA8Research/status/1865676412444967384 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Black Basta Ransomware Leverages Microsoft Teams To Attack Windows Users
by Bernd Kohler 09 Dec '24

09 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Black Basta Ransomware Leverages Microsoft Teams To Attack Windows Users" VG Bernd [0] https://cybersecuritynews.com/black-basta-ransomware-microsoft/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

DDoSecrets Unveils Massive “Library of Leaks” Search Engine with Millions of Leaked Documents
by Bernd Kohler 09 Dec '24

09 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "DDoSecrets Unveils Massive “Library of Leaks” Search Engine with Millions of Leaked Documents" --> ich hoffe auf [0] findet keiner Dokumente/Daten, die nicht ... VG Bernd [0] https://securityonline.info/ddosecrets-unveils-massive-library-of-leaks-sea… [1] https://search.libraryofleaks.org/ -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hackers Leveraging Cloudflare Tunnels, DNS Fast-Flux to Hide GammaDrop Malware
by Bernd Kohler 09 Dec '24

09 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers Leveraging Cloudflare Tunnels, DNS Fast-Flux to Hide GammaDrop Malware" VG Bernd [0] https://thehackernews.com/2024/12/hackers-leveraging-cloudflare-tunnels.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Browser Isolation Bypassed: QR Codes Used in Novel C2 Attacks
by Bernd Kohler 06 Dec '24

06 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Browser Isolation Bypassed: QR Codes Used in Novel C2 Attacks" VG Bernd [0] https://securityonline.info/browser-isolation-bypassed-qr-codes-used-in-nov… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

New Android spyware found on phone seized by Russian FSB
by Bernd Kohler 05 Dec '24

05 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "New Android spyware found on phone seized by Russian FSB" --> "... impersonated a legitimate and popular Android app 'Cube Call Recorder,' ..." VG Bernd [0] https://www.bleepingcomputer.com/news/security/new-android-spyware-found-on… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

VMware vCenter Sudo Privilege Escalation
by Bernd Kohler 05 Dec '24

05 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "VMware vCenter Sudo Privilege Escalation" --> vorab Terms of Service aktzeptieren --> Metasploit-Module VG Bernd [0] https://packetstorm.news/files/id/182981 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Hackers can wirelessly watch your display by HDMI radiation
by Bernd Kohler 05 Dec '24

05 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Hackers can wirelessly watch your display by HDMI radiation" VG Bernd [0] https://www.pcworld.com/article/2413156/hackers-can-wirelessly-watch-your-s… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

AirBugCatcher: Automated Wireless Reproduction of IoT Bugs
by Bernd Kohler 05 Dec '24

05 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "AirBugCatcher: Automated Wireless Reproduction of IoT Bugs" --> das dazugehörige Paper [1] VG Bernd [0] https://github.com/asset-group/air-bug-catcher/ [1] https://asset-group.github.io/papers/airbugcatcher.pdf -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0

Cloudflare’s developer domains increasingly abused by threat actors
by Bernd Kohler 04 Dec '24

04 Dec '24

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Cloudflare’s developer domains increasingly abused by threat actors" --> "... pages.dev' and 'workers.dev' domains, used for deploying web pages and facilitating serverless computing, are being increasingly abused by cybercriminals for phishing and other malicious activities. ..." VG Bernd [0] https://www.bleepingcomputer.com/news/security/cloudflares-developer-domain… -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 E-Mail: kohler(a)itc.rwth-aachen.de Web: https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/c/ITCenterRWTHAachen

1 0