Podcast Detail

Extortion With Password; npm Package Malware; CIRCL IMAP Proxy; Banking Malware

If you are not able to play the podcast using the player below: Use this direct link to the audio file: https://chrt.fm/track/2748D7/https://traffic.libsyn.com/securitypodcast/6078.mp3

SANS Daily Network Security Podcast (Stormcast) for Friday, July 13th 2018

00:00

My Next Class

Application Security: Securing Web Apps, APIs, and Microservices	Online \| US Eastern	Jan 27th - Feb 1st 2025
Network Monitoring and Threat Detection In-Depth	Baltimore	Mar 3rd - Mar 8th 2025

… more classes

Interested in Internet Storm Center stickers? Check here if there are still some available for today.

Extortion Claims Include Leaked Passwords to Appear more Plausiable
https://isc.sans.edu/forums/diary/New+Extortion+Tricks+Now+Including+Your+Password/23866/

npm Package Compromised and Used To Steal Credentials
https://github.com/eslint/eslint-scope/issues/39#issuecomment-404533026

CIRCL IMAP Proxy
https://github.com/CIRCL/IMAP-Proxy

Checkpoint Names "Dorkbot" As A Top Threat (Signup required)
https://research.checkpoint.com/cyber-attack-trends-2018-mid-year-report/

iTunes

MP3 Download

RSS Feed

Google

Podbean

Amazon Echo

YouTube

Spreaker

Spotify

Discussion

deep link to Cisco "Cyber Attack Trends: 2018 Mid-Year Report":
https://research.checkpoint.com/wp-content/uploads/2018/07/Cyber-Attack-Trends-2018-Mid-Year-Report.pdf

Posted by gebhard on Fri Jul 13 2018, 05:06

Post mortem for npm package compromization:
https://eslint.org/blog/2018/07/postmortem-for-malicious-package-publishes

Posted by gebhard on Fri Jul 13 2018, 05:08

New Discussions closed for all Podcasts older than two(2) weeks
Please send your comments to our Contact Form

Application Security: Securing Web Apps, APIs, and Microservices	Online \| US Eastern	Jan 27th - Feb 1st 2025
Network Monitoring and Threat Detection In-Depth	Baltimore	Mar 3rd - Mar 8th 2025
Application Security: Securing Web Apps, APIs, and Microservices	Orlando	Apr 13th - Apr 18th 2025
Application Security: Securing Web Apps, APIs, and Microservices	San Diego	May 5th - May 10th 2025
Network Monitoring and Threat Detection In-Depth	Baltimore	Jun 2nd - Jun 7th 2025