All posts in Uncategorized

DARPA worried battlefield mixed reality vulnerable to ‘cognitive attacks’. Hacks, physical tricks could turn headsets into vomit extractors, but tests already show no ops needed for that. https://www.theregister.com/2023/10/12/darpa_worried_battlefield_mixed_reality/ https://t.me/cKure/13052

■■■■■ Tool: DLL-Spoofer POC for a DLL spoofer to determine DLL Hijacking This python script scans a provided DLL’s exports and creates a basic duplicate CPP DLL template. All exported functions are re-used and pop a simple message window. Additionally on DLL attach we execute the first exported function. This is useful for simply providing…

■■■■□ OSINT investigation by legendary ‘Bellingcat’ on Israel-Palestine conflict where IDF bombed a hospital with 600 to 800 deaths were reported. A few hundred beyond recognition or missing body parts. And few thousand were maimed (severely injured). https://www.bellingcat.com/news/2023/10/18/identifying-possible-crater-from-gaza-hospital-blast/ https://t.me/cKure/13050

■■■■□ Palestine-Israel Cyber-War update: Malicious “RedAlert – Rocket Alerts” Application Targets Israeli Phone Calls, SMS, and User Information. https://blog.cloudflare.com/malicious-redalert-rocket-alerts-application-targets-israeli-phone-calls-sms-and-user-information/ https://t.me/cKure/13049

■■■□□ Splunk AD Threat hunting. https://amr-git-dot.github.io/forensic%20investigation/AD_Threat_Hunting/ https://t.me/cKure/13048

■■■□□ Detecting and preventing LSASS credential dumping attacks. https://www.microsoft.com/en-us/security/blog/2022/10/05/detecting-and-preventing-lsass-credential-dumping-attacks/ https://t.me/cKure/13047

Spam iOS, Android and Windows with Bluetooth pairing messages using Flipper Zero or Android smartphone. https://www.mobile-hacker.com/2023/10/17/spam-ios-android-and-windows-with-bluetooth-pairing-messages-using-flipper-zero-or-android-smartphone/ https://t.me/cKure/13045

■■■□□ Archives: Snowden. https://youtu.be/0dGqR4ue8dg https://t.me/cKure/13044

■■■■□ Deception amid Cyber-War between Israel and Palestine conflict. Israeli Android users are targeted by a malicious version of the ‘RedAlert – Rocket Alerts’ app that, while it offers the promised functionality, acts as spyware in the background. https://www.bleepingcomputer.com/news/security/fake-redalert-rocket-alert-app-for-israel-installs-android-spyware/ https://t.me/cKure/13043

■■■□□Signal says there is no evidence rumored zero-day bug is real. https://www.bleepingcomputer.com/news/security/signal-says-there-is-no-evidence-rumored-zero-day-bug-is-real/ https://t.me/cKure/13042