Month: November 2024


  • Hackers abuse Avast anti-rootkit driver to disable defenses

    ![Malware](https://www.bleepstatic.com/content/hl-images/2023/10/31/Avast.jpg)A new malicious campaign is using a legitimate but old and vulnerable Avast Anti-Rootkit driver to evade detection and take…


  • Irish researcher finds 1.1 million NHS employee records were leaked

    James Cox reports: A Dublin cybersecurity researcher, Aaron Costello, has found that 1.1 million NHS employee records were leaked online…


  • Pacific Pulmonary Medical Group patient information dumped by Everest Ransomware Team

    The Pacific Pulmonary Medical Group (PPMG) in California has a significant data breach problem, but if you were to visit…


  • Decrypting a PDF With a User Password, (Sat, Nov 23rd)

    [Decrypting a PDF With a User Password](/forums/diary/Decrypting+a+PDF+With+a+User+Password/31466/)===================================================================================================* * [](http://www.facebook.com/sharer.php?u=https%3A%2F%2Fisc.sans.edu%2Fforums%2Fdiary%2F31466 ‘Share on Facebook’)* [](http://twitter.com/share?text=Decrypting%20a%20PDF%20With%20a%20User%20Password&url=https%3A%2F%2Fisc.sans.edu%2Fforums%2Fdiary%2F31466&via=SANS_ISC ‘Share on Twitter’) **Published** : 2024-11-23. **Last…


  • Wireshark 4.4.2 Released, (Sat, Nov 23rd)

    [Wireshark 4.4.2 Released](/forums/diary/Wireshark+442+Released/31460/)=======================================================================* * [](http://www.facebook.com/sharer.php?u=https%3A%2F%2Fisc.sans.edu%2Fforums%2Fdiary%2F31460 ‘Share on Facebook’)* [](http://twitter.com/share?text=Wireshark%204.4.2%20Released&url=https%3A%2F%2Fisc.sans.edu%2Fforums%2Fdiary%2F31460&via=SANS_ISC ‘Share on Twitter’) **Published** : 2024-11-23. **Last Updated** : 2024-11-23 12:42:31…


  • Google Exposes GLASSBRIDGE: A Pro-China Influence Network of Fake News Sites

    ![Fake News Sites](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVwD_bmVOoveoVploHAhlbMVbvppxsPCphWunpJU8bk_GEsoGXUJ4Rfdh7IzxKR2331_Qe04kVUMoAnZl3lp3GfQ5faa4p3mcKxxEn30rLyf52RLWkOUcRxw1sqKp7PDWthBU-gimD9b5ekgnxX1Y_YpVse_9mHjNEYhY_cDGQ7emkvhLX1vJueiwkYr6h/s728-rw-e365/china.png ‘Fake News Sites’)Government agencies and non-governmental organizations in the United States have become the target of a…


  • North Korean Hackers Steal $10M with AI-Driven Scams and Malware on LinkedIn

    ![AI-Driven Scams](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsEl0m-czoIV0cPaReBp9nmB2Utqr9dacy9zkE_H_0GlVRXxpFWO-3CMQWsov0FkUM3NNaEx434VvbvyHgxpQnsZL7w58kAM60rNS8k5j6vuxKim8W_s8S8dasE7TUQNaCS9CkA5Pj3j_TrOY4BQxE6BSwJ0amVBiyD-1maxtoGxLKjIzMTWk8-xKWP3Kj/s728-rw-e365/northkrorea.png ‘AI-Driven Scams’)The North Korea-linked threat actor known as Sapphire Sleet is estimated to have stolen more than $10…


  • Cobalt Strike Beacon Detected – 118[.]193[.]37[.]157:8889

    * [Cobalt Strike](https://www.redpacketsecurity.com/category/cobalt-strike/)Cobalt Strike Beacon Detected — 118-[.-]193-[.-]37-[.-]157:8889================================================================[November 23, 2024](https://www.redpacketsecurity.com/2024/11/) Cobalt Strike Beacon Detection Alerts > The Information provided at…


  • Cobalt Strike Beacon Detected – 54[.]224[.]145[.]120:443

    * [Cobalt Strike](https://www.redpacketsecurity.com/category/cobalt-strike/)Cobalt Strike Beacon Detected — 54-[.-]224-[.-]145-[.-]120:443===============================================================[November 23, 2024](https://www.redpacketsecurity.com/2024/11/) Cobalt Strike Beacon Detection Alerts > The Information provided at…


  • Cobalt Strike Beacon Detected – 52[.]231[.]10[.]139:8080

    * [Cobalt Strike](https://www.redpacketsecurity.com/category/cobalt-strike/)Cobalt Strike Beacon Detected — 52-[.-]231-[.-]10-[.-]139:8080===============================================================[November 23, 2024](https://www.redpacketsecurity.com/2024/11/) Cobalt Strike Beacon Detection Alerts > The Information provided at…