BC INTERNET

Saved by @Alex1Powell

Kyle Hanslovan
@KyleHanslovan 5 years, 7 months ago 1562 views

Save to PDF Share See On Twitter

Only 1 / 67 antivirus engines list SUNBURST backdoor as malicious - SolarWinds.Orion.Core.BusinessLayer.dll https://t.co/taaiUtSJzR #SUNBURST #UNC2452

SolarWinds' digital certificate hasn't been revoked yet.

The full compromised package is still being hosted online as well 😓 hxxps://downloads.solarwinds[.]com/solarwinds/CatalogResources/Core/2019.4/2019.4.5220.20574/SolarWinds-Core-v2019.4.5220-Hotfix5.msp

Job class within the backdoored #Sunburst DLL is pretty straight forward and aligns with @FireEye's analysis. CollectSystemDescription:

DeleteFile

DeleteRegistryValue

FileExists

#UNC2452 prefers MD5 for their file hashing routine

#UNC2452's DirList is savvy enough to always expand environment variables. Doesn't appear to have any recursion or depth arguments for DirWalk'ing.

Use of token manipulation was underwhelming. Sets process privilege to SeTakeOwnershipPrivilege, SeRestorePrivilege, and SeShutdownPrivilege.

Domain1 = https://t.co/BGPAyeprMm
(just like the report said). Thus far all analysis has held up (no real surprise there).

One of the anomalous #SUNBURST DLLs from October 2019 that Microsoft highlighted can be found in the SolarWinds Coreinstall.msi for 2019.4.5220.20161 - hxxps://downloads.solarwinds[.]com/solarwinds/CatalogResources/Core/2019.4/2019.4.5220.20161/CoreInstaller.msi

Malicious #SUNBURST DLL CE77D116A074DAB7A22A0FD4F2C1AB475F16EEC42E1DED3C0B0AA8211FE858D6 from May 2020 can be found in CoreInstaller.msi for 2020.2.5320.27438 -hxxps://downloads.solarwinds[.]com/solarwinds/CatalogResources/Core/2020.2/2020.2.5320.27438/CoreInstaller.msi

Malicious #SUNBUST DLL 019085A76BA7126FFF22770D71BD901C325FC68AC55AA743327984E89F4B0134 from April 2020 can be found in CoreInstaller.msi for 2020.2.5220.27327 - hxxps://downloads.solarwinds[.]com/solarwinds/CatalogResources/Core/2020.2/2020.2.5220.27327/CoreInstaller.msi

More from Internet

foone
@Foone

WHO STOLE MY DISK SECTOR

what

this is a different disk.

did two disks on my desk go bad at the same time? or is this USB drive A USELESS FAILURE?

ok I'm trying a third disk and if this fails this drive is going right in the lake

it wrote successfully! now I can install some MS-DOS 6.22

dang it. after all that time installing it, it can't boot.
it doesn't even fail to boot, it just hangs at boot

some stupid problem with partitioning/mbr, probably

$Alberto Gimeno \U0001f3f3\ufe0f\u200d\U0001f308\U0001f1ea\U0001f1f8\U0001f49c\U0001f90e$

Alberto Gimeno 🏳️‍🌈🇪🇸💜...
@gimenete

I'm going to tell you a little bit how we work on features at GitHub. It's simple, but very powerful in my opinion. At GitHub we have a high performance culture.

We are deploying changes almost all the time while keeping the service running and the deployment failure ratio needs to be super low! We are constantly working on new medium/big features, we have frequent deploys and required peer reviews.

How do we know that big features are not conflicting with each other in functionality and in version control. How do we merge the work done in these non-trivial features? How do we do prevent peer reviews slow down our productivity?

With basically two things: split the work in small batches and feature flags. We don't have long-lived feature branches. We do very small changes all the time and deploy them.

We could split a feature in tens or hundreds of PRs, but until it is beta or GA, we don't expose it to users by using feature flags.

Advertisement

Jake Williams
@MalwareJake

Twas the night before Christmas and all over the ‘net,
Not a creature was stirring except a few cyber threats
The firewalls were configured at the egress with care,
But that wouldn’t stop us from being hit by ransomware. 1/

The children were nestled all snug in their beds,
While attackers hit the web server and established a beachhead
Mama with her EDR and I with my IDS
Were ready to tackle this hot infosec mess. /2

Down in the SOC there arose such a clatter,
I logged into my dashboard to see what was the matter.
This thing had better work, it cost so much cash.
How in 2020 can this thing STILL require Flash?! 3/

The alerts lit up the dashboard, it produced such a glow
But it’s because the threshold for alerting was configured so low.
When what to my wondering eyes did appear,
But 300 false positive alarms. I thought “I’ll be here all year.” 4/

Then a little old DLL, signed by SolarWinds,
Was really the Russians, masters of supply chain break-ins.
We need some new vendors said the CISO, and the salespeople came. 5/

Nafs
@NafsSays

I'll touch upon few different types of cyber frauds and few possible ways in which we can avoid ourselves to be duped of money, time & energy.

Will also attach few real registered FIRs showing that most of the times such crimes happen with educated & learned people.

1/16

Cyber Fraud type 1 - Facebook/Instagram

Profile cloning -Fraudster will make exact same profile like yours - using pictures from your own profile. They will then message to your contacts asking for money immediately for the surgery of mother or similar emotional lie

2/16

Always verify before sending money.
Don't verify by calling that person, instead, call a common friend or family member of that person. Don't think you can't be fooled - I know at least 20 people working in Top IT MNCs becoming victim of this fraud. Lock your FB/Insta.

3/16

Cyber Fraud type 2 -OLX/Quikr
This generally happens while selling something on OLX/Quikr & similar platforms. In such cases, people will fraud in the name of paying money by asking to scan the QR code or click a link.
NEVER scan the QR code to receive money, give your UPI

4/16

Cyber Fraud type 3 - Fake SMS & Call from unknown numbers
Fraudster will send fake SMS showing amount credited to the account - with correct account number in SMS. Then they will call from unknown numbers asking for money.

ALWAYS check your bank account first via bank app.

5/16

David Frum
@davidfrum

Yoga employs more Americans than coal. But compare and contrast 1/2

I think many of us carry in our minds an image of the US economy that looks like this

when the reality is this

You May Also Like

Anu Satheesh
@AnuSatheesh5

Krishna and the False Vasudeva
#story

Paundraka Vasudeva was a King mentioned in Bhagavatha Purana. He was friend of Jarasandha, the king of Magadha. He believed that he is Vasudeva Krishna.
Once Paundraka Vasudeva received a letter from Shishupala, stating that he wanted

protection from Krishna, because it was Rukmini's wedding and Shishupala thought Krishna would take away Rukmini.

Paundraka Vasudeva agreed and went to Vidarbha, the Kingdom of Shishupala, but failed to provide protection as Krishna took Rukmini away. Paundraka Vasudeva was

feeling sad. His Minister's cheered him.
They said that Paundraka Vasudeva was the real Vasudeva and Krishna is a cheater. Everyone started to believe this and soon Paundraka Vasudeva soon started to taunt Krishna by saying that Krishna was a cheater.
Paundraka Vasudeva then

challenged Krishna to a war and Krishna said that he would give Paundraka his Chakra and Gadha. Paundraka suspected some foul play and went to King of Kashi for his protection. In battlefield, Krishna came in front of Paundraka, and said that he would throw his Chakra and Gadha

to him. But, Krishna's throw was perfect that the Gadha hurled him to the Ground and the Chakra killed him.
Krishna soon killed king of Kashi with an arrow and his head went flying to Kashi.
Thus Victorious Krishna was recieved by people of Dwaraka.
Hare Krishna 🙏🕉🙏

Chris Herd
@chris_herd

I've spoken to 1,500+ people about remote work in the last 9 months

A few predictions of what is likely to emerge before 2030

[ a thread ] 💻🏠🌍

🚜 Rural Living: World-class people will move to smaller cities, have a lower cost of living & higher quality of life

These regions must innovate quickly to attract that wealth. Better schools, faster internet connections are a must

⏰Asynchronous Work: Offices are instantaneous gratification distraction factories where synchronous work makes it impossible to get stuff done

Tools that enable asynchronous work are the most important thing globally remote teams need. A lot of startups will try to tackle this

⚽️Hobbie Renaissance: Remote working will lead to a rise in people participating in hobbies and activities which link them to people in their local community

This will lead to deeper, more meaningful relationships which overcome societal issues of loneliness and issolation

🌍Diversity & Inclusion: The most diverse and inclusive teams in history will emerge rapidly

Companies who embrace it have a first-mover advantage to attract great talent globally. Companies who don't will lose their best people to their biggest competitors

Advertisement

$MaMaMia \U0001f1ec\U0001f1f7\U0001f1e8\U0001f1fe\U0001f1e6\U0001f1f2 SupportGreekProducts$

MaMaMia 🇬🇷🇨🇾🇦🇲 Support...
@MaMaMia73189983

Following @BAUDEGS I have experienced hateful and propagandist tweets time after time. I have been shocked that an academic community would be so reckless with their publications. So I did some research.
The question is:
Is this an official account for Bahcesehir Uni (Bau)?

Bahcesehir Uni, BAU has an official website https://t.co/ztzX6uj34V which links to their social media, leading to their Twitter account @Bahcesehir

BAU’s official Twitter account

BAU has many departments, which all have separate accounts. Nowhere among them did I find @BAUDEGS
@BAUOrganization @ApplyBAU @adayBAU @BAUAlumniCenter @bahcesehirfbe @baufens @CyprusBau @bauiisbf @bauglobal @bahcesehirebe @BAUintBatumi @BAUiletisim @BAUSaglik @bauebf @TIPBAU

Nowhere among them was @BAUDEGS to find

Chuck Wendig
@ChuckWendig

TRUMP: "I've decided to eat babies."

PEOPLE: "He can't eat babies, that's super illegal."

TRUMP, on TV, eating babies, not even cooking them first: "People are saying that I really am the best baby-eater, folks."

NYT: "Trump Vs. Babies: The Rhetoric On Both Sides Must Stop"

Jeff Flake tweets: "It is a sad day in America when this callous man can eat babies live on TV"

Jeff Flake, 10 seconds later, votes to help him install a series of 4,000 new judges that are very, very pro-babyphagia.

Judge Kavanaugh, found drunk in a Capitol Hill closet: "I LIKE BEER. OKAY? I LIKE BEER AND I LIKE BABIES AND THAT'S NOT SO WRONG. THAT'S RIGHT. I LIKE BABIES DIPPED IN BEER. I JUST DIP EM. IN THE BEER. THE BABIES. THE BABIES I EAT. OKAY? THAT'S AMERICA."

Mike Pence, wringing his hands about the baby-eating: "We must take care of our children. Our youngest must be protected on this troubling day."

Mike Pence then invites a Baby Chef to say a prayer.

Twitter Users: "It's a distraction technique! Trump eating babies is trying to DISTRACT YOU from ALL THE OTHER HORRORS, which are themselves distractions from the BABY-EATING. It's DISTRACTIONS ALL THE WAY DOWN."

Trump: *eats tons of babies at a rally*

*literal tons of babies*

Yoruba History - by NN...
@YorubaHistory

The Ife Primary Education Research Project (1970-1983).

aka

The Ife 6-Year Primary Project.

In 1970, as the Director of the Institute of Education of the then University of Ife (now Obafemi Awolowo University, Ile-Ife), later Dean Faculty of Education, Prof. Babs Fafunwa & his team embarked on one of the most groundbreaking research projects in education for Yorubaland.

The aim of the project was to test the hypothesis that the best instructional medium for good concept formation at a very tender age is the mother tongue.

This was bolstered by the observation that “of all the continents and peoples of the world, it is only in Africa…

…that formal education is offered in a language that is foreign to the child.”

So, Yoruba was to be used & tested as an exclusive medium of passing information or instructions to a set of pupils.

The project was based on the premise that:

(a). the child will benefit culturally, socially, linguistically & cognitively.

(b). the child’s command of English will be improved if he is taught English as an entirely separate subject by a specialist teacher through the 6 years.