The company also provided a download link and related instructions for the tool
The message with the fake offer contained a PDF that would have delivered spyware
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in June:
Articles
Configure a BOVPN virtual interface in Fireware v11.11.x that uses GRE for dynamic routing to a Cisco endpoint
Geoblocking can block connections to inte...
The threat actor claimed he was seeking “revenge” on Disneyland employees
Hackers breached Aon systems for well over a year
A couple of years ago we released PolyFile: a utility to identify and map the semantic structure of files, including polyglots, chimeras, and schizophrenic files. It’s a bit like file, binwalk, and Kaitai Struct all rolled into one. PolyFile initially used the TRiD definition database for file ident...
An open letter from the NCSC and ICO asks lawyers to do more to stop the scourge of ransomware
A new investigation finds that a Chinese APT group is targeting Russian organizations with RAT backdoors
Background Typically, organizations utilize Zix Secure Messaging as a convenient alternative to Dropbox or other file sharing related tools because it’s easier to share sensitive information with users outside of the organization. Shadow IT has always been a standing issue among large enterprises an...
Turning on Lockdown Mode will harden device defenses and strictly limit certain functionalities
Users can now connect to a VPN on their desktops and enjoy benefits of VPNs on their mobiles
Wherever you are in the world, a typical day as a Trail of Bits Engineer-Consultant means easing into your work. Here’s a short video showing some of our European colleagues describing a typical day as a Trail of Bits Engineer-Consultant: You generally set your own hours, to provide at least a coupl...
There are no workarounds that can be used to address the flaws, so updating systems is paramount
Recorded Future claims Kremlin is using multiple outlets to amplify disinfo
When engineers apply to Trail of Bits, they’re often surprised by how straightforward and streamlined our hiring process is. After years of experience, we’ve cut the process to its bedrock, so that it’s candidate focused, quick, and effective. Here’s a short video showing some of our European collea...
Unprecedented joint press conference signals urgent need to act
Global hotel chain compromised yet again
Pluggable Authentication Modules (PAM) on Unix based systems are useful to change logon behavior and enforce authentication via various means.
In “Red Team Strategies” the chapter “Protecting the Pentester” walks the reader through the configuration of a PAM module to get notified in real-time via a...
According to CISA, the threat actors have been engaging in these campaigns since May 2021
The weaponized Excel document would likely be distributed by means of a spear-phishing email