Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Japan Earthquake: Possible scams / malware

Published: 2011-03-11
Last Updated: 2011-03-11 22:48:32 UTC
by Guy Bruneau (Version: 2)
4 comment(s)

There will probably be some emails scams and malware circulating regarding the recent Japanese earthquake that occurred overnight. If you receive such emails, could you provide samples using our contact form?

Be aware off

Fraudulent Organizations: If possible, donate to organizations you know and trust, not to new organizations just set up for this particular event. The IRS maintains a list of tax exempt charitable organizations [1]. This list is not 100% up to date, and it takes a while for a new organization to be added. But it can serve as a first sanity check.

Malware: Malware may be advertised as a video report of the event or come under other pretenses.

Update 1: Reports are already showing Fake AV exploiting the Japanese earthquake. Some of the sites to watch for are listed here. Other reports have been added as comments.

-----------

Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu

Keywords: Earthquake Japan
4 comment(s)

Snort IDS Sensor with Sguil Framework ISO

Published: 2011-03-11
Last Updated: 2011-03-11 16:34:27 UTC
by Guy Bruneau (Version: 1)
3 comment(s)

I have just released an updated CD of a hardened OS that includes Snort IDS sensor (version 2.9.0.4) with all the Sguil components ready to use. It is available in two versions, 32-bit and 64-bit. The CD has 3 options: sensor only, database only or all components on the same system.

The CD includes some new tools and updated scripts. The install.pdf document on how to install and configure the system is located in the rel_note directory.

Checksum for 32-bit available here and 64-bit available here.

-----------

Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu

3 comment(s)
Diary Archives