Kerberos protocol security

https://security.stackexchange.com/questions/269171/kerberos-protocol-security

#indicatorofcompromise #attackprevention #attackvector #protocols #kerberos

What are some symptoms of malware exfiltrating data in packet captures?

https://security.stackexchange.com/questions/268927/what-are-some-symptoms-of-malware-exfiltrating-data-in-packet-captures

#indicatorofcompromise #wireshark #malware

What are the indications on my smartphone that I have security problem/data leak/trojan

https://security.stackexchange.com/questions/267111/what-are-the-indications-on-my-smartphone-that-i-have-security-problem-data-leak

#indicatorofcompromise #android

#emotet now uses #powershell commands in .lnk files, the string is obfuscated with nulls/blank spaces so the target is not shown
some #Indicatorofcompromise #ioc :
- .ps1 files in %tmp%
- focusmedica[.]in
- demo34[.]ckg[.]hk
- colegiounamuno[.]es
- cipro[.]mx
- filmmogzivota[.]rs
- creemo[.]pl
command for checking %tmp%:
 dir C:\users\%username%\AppData\Local\Temp\*.ps1

Woran Administratoren eine Kompromittierung ihrer Maschinen mit der Ransomware Lockbit 2.0 erkennen, erläutert das FBI in einer aktuellen Anleitung.
FBI gibt Hilfestellung zur Erkennung von Lockbit-Befall