All posts by cK-bot

■□□□□ The court in the Northern Netherlands sentenced a man on Thursday for large-scale digital fraud. According to the  Public Prosecution Service, it is a scammer “from the top layer of the phishing world. The 22-year-old man from Groningen has been sentenced to 4.5 years in prison. https://cyberthreatintelligence.com/news/dutch-scammer-sentenced-to-4-5-years-in-prison/ https://t.me/cKure/10135

■□□□□ Interesting thread on Chrome feature. https://twitter.com/quidity/status/1461427137101979650 https://t.me/cKure/10134

■■■□□ DPRK : North Korean Hacking Group Targets Diplomats, Forgoes Malware. https://t.me/cKure/10132

■■■□□ Russia: Some Russian language hacking forums open to Chinese and English speakers. China https://t.me/cKure/10131

Tool: fileless-xec enables a remote binary execution on a local machine directly from memory without dropping them on disk. https://github.com/ariary/fileless-xec https://securityonline.info/fileless-xec-a-stealth-dropper/ https://t.me/cKure/10129

■■■■■ Privacy tool: The simplest way to de-Google your life and business: Inbox, Calendar, Files, Contacts & much more. https://github.com/skerkour/bloom https://t.me/cKure/10128

■■■■■ Tool: Wacker – A WPA3 Dictionary Cracker. https://hakin9.org/wacker-a-wpa3-dictionary-cracker/ https://github.com/blunderbuss-wctf/wacker https://t.me/cKure/10126

■□□□□ ​The BrazKing Android banking trojan has returned with dynamic banking overlays and a new implementation trick that enables it to operate without requesting risky permissions. https://www.bleepingcomputer.com/news/security/android-malware-brazking-returns-as-a-stealthier-banking-trojan/ https://t.me/cKure/10124

■■■□□ HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks. https://www.microsoft.com/security/blog/2021/11/11/html-smuggling-surges-highly-evasive-loader-technique-increasingly-used-in-banking-malware-targeted-attacks/ https://t.me/cKure/10123

■■■■□ Strict CSP is now defined in the CSP spec (which is probably my first W3C spec contribution). https://w3c.github.io/webappsec-csp/#strict-csp https://t.me/cKure/10122