@typesfast Yes. Worked for a company who leased floor space to a supplier so they could put in a cage to hold inventory. When the goods passed through the door in the cage to the assembly line, the supplier was paid.

As part of our commitment to keeping our customers/community protected & informed, we are releasing a blog that shines light on transition between Stage 1 and 2 of #Solorigate/#SUNBURST campaign, custom Cobalt Strike loaders, post-exploit. artifacts, IOCs: https://t.co/b0ReHMa63u

Here are some highlights:
The missing link between the Solorigate backdoor and the custom #CobaltStrike loaders observed during the #Solorigate is an Image File Execution Options (IFEO) Debugger registry value created for the legitimate process dllhost.exe (ATT&CK ID: T1546.012).

Once the registry value is created, the attackers wait for the occasional execution of dllhost.exe, which might happen naturally on a system. This execution triggers a process launch of wscript.exe configured to run the VBScript file dropped by the SolarWinds backdoor (Stage 1).

The VBScript in turn runs rundll32.exe, activating the Cobalt Strike loader DLL using a clean parent/child process tree completely disconnected from the SolarWinds process. Finally, the VBScript removes the previously created IFEO value to clean up any traces of execution.

On the custom Cobalt Strike Loaders: we identified several second-stage malware, including TEARDROP, Raindrop, and other custom loaders for the Cobalt Strike beacon. During the lateral movement phase, the custom loader DLLs are dropped mostly in existing Windows sub-directories.

How Amazon makes money?

[ Amazon's business model decoded😃]

@dmuthuk @unseenvalue @FI_InvestIndia @Vivek_Investor @drprashantmish6 @caniravkaria

🧵👇

1/ A person named Jeffery earns 100 dollars per month and has an expenditure of 120 dollars monthly. He has a very good reputation in the society. So, he takes a loan of 1k dollars for a month and this 1k cash is invested in new business ventures.

2/ For the next month, he pays his liability back by taking a loan from another person for 1.5k dollars. The loan of 1k is paid back and the remaining 500 dollars are invested in another business venture.

3/ By the end of the month, he earns 150 dollars through his old and new business ventures but has a total expenditure of 200 dollars. He again is in a deficit of 50 dollars. To pay back his 1.5k dollar loan, he takes a loan for 2k dollars

4/ This cycle goes on and on. Jeffery keeps on taking bigger loans to repay the previous loan and the leftover extra loan is invested in bigger ventures which produce more expense than income.

I just keep being surprised by how many people expect all business to run as usual despite the fact that we're into year two of a worldwide pandemic.

Like.... anyone notice how many people's jobs got a ton harder? Or how many people lost their jobs, or the prospect of even being in the running for employment?

Anyone notice how many people now have massively heavier care responsibilities -- for children, parents, elderly relatives and friends, you name it?

Anyone notice the massive, unceasing level of stress that comes from mixed messages coming from govts, bungled safety policies and vaccination plans, endless lockdowns?

Every now and then I see someone miffed that some inessential thing hasn't gone as quickly or as efficiently as they'd have like, and I have to wonder -- are we living on the same planet?

WTO e-commerce #digitaltrade consolidated draft leaked by @bilaterals_org Some interesting things (1/n)

(2/n) Intermediary liability is included without brackets, normally meaning there is some agreement. The text is based on US proposals but has more extensive caveats and exceptions than existing US trade deals

(3/n) No agreement on cross-border data flows at WTO #digitaltrade consolidated text

(4/n) FWIW The UK's (and US) position on WTO #digitaltrade exceptions to the liberalisation of cross-border data flows vs the EU's. Guess which one is which

(5/n) Financial data may be included in the ban on forced localisation of computing facilities, but with many caveats. US regulators had pushed against this in the past but they seem to be losing the battle. Several alt texts. UK to bring more proposals.