SANS Internet Storm Center, InfoCON: green

Veeam Phishing via Wav File, (Fri, Jul 18th)

about 17 hours ago

A interesting phishing attempt was reported by a contact. It started with...

ISC Stormcast For Friday, July 18th, 2025 https://isc.sans.edu/podcastdetail/9532, (Fri, Jul 18th)

about 22 hours ago

Hiding Payloads in Linux Extended File Attributes, (Thu, Jul 17th)

1 day ago

This week, it's SANSFIRE[1]! I'm attending the FOR577[2] training ("Linux Incident Response...

ISC Stormcast For Thursday, July 17th, 2025 https://isc.sans.edu/podcastdetail/9530, (Thu, Jul 17th)

2 days ago

More Free File Sharing Services Abuse, (Wed, Jul 16th)

2 days ago

A few months ago, I wrote a diary about online services used...

ISC Stormcast For Wednesday, July 16th, 2025 https://isc.sans.edu/podcastdetail/9528, (Wed, Jul 16th)

3 days ago

Keylogger Data Stored in an ADS, (Tue, Jul 15th)

4 days ago

If many malware samples try to be "filess" (read: they try to...

ISC Stormcast For Tuesday, July 15th, 2025 https://isc.sans.edu/podcastdetail/9526, (Tue, Jul 15th)

4 days ago

DShield Honeypot Log Volume Increase, (Mon, Jul 14th)

4 days ago

The volume of honeypot logs changes over time. Very rarely are honeypot...

ISC Stormcast For Monday, July 14th, 2025 https://isc.sans.edu/podcastdetail/9524, (Mon, Jul 14th)

5 days ago

Experimental Suspicious Domain Feed, (Sun, Jul 13th)

5 days ago

We have had a "newly registered domain" feed for a few years...

ISC Stormcast For Friday, July 11th, 2025 https://isc.sans.edu/podcastdetail/9522, (Fri, Jul 11th)

8 days ago