Smoke and (screen) mirrors: A strange signed backdoor
Credit to Author: Matt Wixey| Date: Tue, 09 Apr 2024 19:08:05 +0000
Sophos X-Ops discovers a curious backdoored (and signed) executable, masquerading as something else entirely
Read MoreComputer Security Articles
RSS Reader for Computer Security Articles
sophos x-ops
Remote Desktop Protocol: The Series
Credit to Author: Angela Gunn| Date: Wed, 20 Mar 2024 16:18:21 +0000
What is RDP, why is it a very nearly ubiquitous finding in incident response, and how can investigators run it to ground it when it goes wrong? An Active Adversary Special Report
Read MoreRemote Desktop Protocol: Exposed RDP (is dangerous)
Credit to Author: Angela Gunn| Date: Wed, 20 Mar 2024 16:16:34 +0000
Is it really that risky to expose an RDP port to the internet? What if you change the default port? What if it’s just for a little while? The data answers, loud and clear
Read MoreRemote Desktop Protocol: Queries for Investigation
Credit to Author: Angela Gunn| Date: Wed, 20 Mar 2024 16:15:12 +0000
How can defenders begin to make sense of RDP issues on their networks? We present three powerful tools for investigators’ toolkits
Read MoreRemote Desktop Protocol: How to Use Time Zone Bias
Credit to Author: Angela Gunn| Date: Wed, 20 Mar 2024 16:13:08 +0000
Where in the world is your attacker? Presenting a less-known but useful event to look for in your logs
Read MoreRemote Desktop Protocol: Executing the 4624_4625 Login Query
Credit to Author: Angela Gunn| Date: Wed, 20 Mar 2024 16:11:40 +0000
Keeping an eye on who’s trying to get onto your network – whether or not they’re successful – can pay off on multiple fronts
Read MoreRemote Desktop Protocol: Executing the External RDP Query
Credit to Author: Angela Gunn| Date: Wed, 20 Mar 2024 16:09:06 +0000
On the hunt for successful RDP connections that have entered your network from outside? A step-by-step guide (and a query to get you started)
Read MoreThe 2024 Sophos Threat Report: Cybercrime on Main Street
Credit to Author: gallagherseanm| Date: Tue, 12 Mar 2024 10:00:28 +0000
Ransomware remains the biggest existential cyber threat to small businesses, but others are growing.
Read More