B'ad Samurai

Unit 42

Almost Half of Malware Samples Communicate Direct to IP

Nearly half of C2 malware bypasses DNS by connecting directly to IP addresses. Zero trust IP enforcement secures networks against these threats.

michigan.gov

Cyber Snapshot - Fake ReCAPTCHA Attacks

Threat actors are now using fake CAPTCHA in their attack methodology. Websites still show the original prompt that users are used to seeing, but they are also prompted to press a series of keystrokes (usually involving WIN+R, CTRL+V, and Enter) to prove that they are human. This allows the website to execute a command on the workstation, usually a remote PowerShell script, to download malware from an external website and execute it on the workstation.

IFIN - The Independent Federated Intelligence Network: "The best time to block the finger protocol (port …" - Infosec Exchange