Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

From lolly pops to afterglow

Published: 2008-08-10
Last Updated: 2008-08-10 11:12:52 UTC
by Stephen Hall (Version: 1)
0 comment(s)

For those of you who are as many in years as some of the ISC handlers, you may remember that Kojak star Telly Savalas had a singing career as well as one playing a lollypop sucking cop in New York. He had a UK number 1 hit for the song "If" which had the immortal lyrics

"If a picture paints a thousand words,
Then why can't I paint you?"

Well in the security world we are following the lyrics of David Gates and using visualisation as a powerful technique in security log analysis.

The Davix Live CD distribution has been released and it contains a wide selection of security tools which are categorised in the Capture, Process and Visualise groups.

If you are interested in the power of Visualisation techniques in security analysis, it is well worth a look.

 

0 comment(s)

Alex and Mark get the girls

Published: 2008-08-10
Last Updated: 2008-08-10 10:21:32 UTC
by Stephen Hall (Version: 1)
0 comment(s)

Well as Blackhat and Defcon come to a close today in Vegas, some of the presentations are surfacing on the web. One which is already rightly attracting some interest is  "How To Impress Girls With Browser Memory Protection Bypasses" by Alexander Sotirov and Mark Dowd.

You can catch up with the presentation if you missed out on the Vegas heat by jumping across to their site.

Keywords:
0 comment(s)

Fake IE 7 update spam doing the rounds

Published: 2008-08-10
Last Updated: 2008-08-10 09:56:42 UTC
by Stephen Hall (Version: 1)
1 comment(s)

A number of readers have alerted us to a round of IE7 update spam being sent out. The e-mails read:


You are receiving this e-mail because you subscribed to MSN Featured Offers.
Microsoft respects your privacy. If you do not wish to receive this MSN Featured
Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe
you from e-mail communications from third-party advertisers that may appear in MSN
Feature Offers. This shall not constitute an offer by MSN. MSN shall not be
responsible or liable for the advertisers' content nor any of the goods or service
advertised. Prices and item availability subject to change without notice.

Well, true enough Microsoft will not be responsible as its not from them! (Shock / Horror).

For the sample we received, VT has good coverage:

http://www.virustotal.com/analisis/18b97fb3bc30251051a8542a90401b6f

 

 

Keywords: ie7 spam
1 comment(s)
Diary Archives