Mastodon

P1Security🎥 What is O-RAN, really?O-RAN isn't just a buzzword — it's a structural shift in how we build radio access networks.By moving away from proprietary, locked-in systems and toward open, cloud-native architectures, operators gain flexibility… but also inherit new risks.At the beginning of this analysis, we lay the groundwork — defining what O-RAN is before unpacking the security implications throughout the session.▶️ Watch the full webinar for the complete breakdown: <a href="https://app.getcontrast.io/register/p1-security-open-ran" rel="nofollow noopener" translate="no" target="_blank">https://app.getcontrast.io/register/p1-security-open-ran</a><a href="https://infosec.exchange/tags/ORAN" class="mention hashtag" rel="nofollow noopener" target="_blank">#ORAN</a> <a href="https://infosec.exchange/tags/TelecomSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelecomSecurity</a> <a href="https://infosec.exchange/tags/5GSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#5GSecurity</a> <a href="https://infosec.exchange/tags/MobileNetworks" class="mention hashtag" rel="nofollow noopener" target="_blank">#MobileNetworks</a> <a href="https://infosec.exchange/tags/NetworkSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#NetworkSecurity</a> <a href="https://infosec.exchange/tags/CRAN" class="mention hashtag" rel="nofollow noopener" target="_blank">#CRAN</a> <a href="https://infosec.exchange/tags/OpenRAN" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenRAN</a> <a href="https://infosec.exchange/tags/TelcoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelcoSec</a> <a href="https://infosec.exchange/tags/TelecomTransformation" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelecomTransformation</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/P1Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#P1Security</a>

P1Security🚨 𝐒𝐒7 𝐄𝐱𝐩𝐥𝐨𝐢𝐭 𝐒𝐨𝐥𝐝 𝐎𝐧𝐥𝐢𝐧𝐞: 𝐔𝐧𝐬𝐞𝐜𝐮𝐫𝐞𝐝 𝐆𝐚𝐭𝐞𝐰𝐚𝐲𝐬 𝐁𝐚𝐜𝐤 𝐢𝐧 𝐭𝐡𝐞 𝐒𝐩𝐨𝐭𝐥𝐢𝐠𝐡𝐭 🚨A recent dark web listing is offering access to an SS7 gateway for $5000, enabling SMS interception, location tracking, and call surveillance. While it’s unclear how legitimate the offer is, the risk is real: unsecured SS7 entry points still exist—and are still being sold.𝐖𝐡𝐲 𝐢𝐭 𝐦𝐚𝐭𝐭𝐞𝐫𝐬:- Legacy telecom gateways are vulnerable, especially if left unmonitored.- Threat actors can abuse signaling to bypass 2FA, monitor targets, or exfiltrate sensitive data.- Operators must act before regulators or adversaries do.🔒 P1 Security protects mobile networks by detecting and blocking malicious SS7 activity in real time, before exploits take hold.📥 Understand how attackers exploit SS7 and how to stop them:👉 𝐆𝐞𝐭 𝐏1 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲'𝐬 𝐫𝐞𝐬𝐞𝐚𝐫𝐜𝐡 𝐖𝐡𝐢𝐭𝐞𝐩𝐚𝐩𝐞𝐫 – “𝐒𝐒7 𝐀𝐭𝐭𝐚𝐜𝐤𝐞𝐫 𝐇𝐞𝐚𝐯𝐞𝐧 𝐓𝐮𝐫𝐧𝐬 𝐢𝐧𝐭𝐨 𝐑𝐢𝐨𝐭”: <a href="https://www.p1sec.com/white-paper/ss7-attacker-heaven-turns-into-riot-presentation" rel="nofollow noopener" translate="no" target="_blank">https://www.p1sec.com/white-paper/ss7-attacker-heaven-turns-into-riot-presentation</a> <a href="https://infosec.exchange/tags/TelecomSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelecomSecurity</a> <a href="https://infosec.exchange/tags/SS7" class="mention hashtag" rel="nofollow noopener" target="_blank">#SS7</a> <a href="https://infosec.exchange/tags/SignalingSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#SignalingSecurity</a> <a href="https://infosec.exchange/tags/CyberThreats" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberThreats</a> <a href="https://infosec.exchange/tags/P1Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#P1Security</a>

The DefendOps DiariesThe FBI is sounding the alarm: state-backed hackers are using custom malware and zero-day exploits to slip past telecom defenses. How are these tactics evading detection, and what does it mean for our security? Read more.<a href="https://thedefendopsdiaries.com/unmasking-salt-typhoon-the-cyber-threat-to-telecom-networks/" rel="nofollow noopener" translate="no" target="_blank">https://thedefendopsdiaries.com/unmasking-salt-typhoon-the-cyber-threat-to-telecom-networks/</a><a href="https://infosec.exchange/tags/salt_typhoon" class="mention hashtag" rel="nofollow noopener" target="_blank">#salt_typhoon</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/telecomsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#telecomsecurity</a> <a href="https://infosec.exchange/tags/apt" class="mention hashtag" rel="nofollow noopener" target="_blank">#apt</a> <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#malware</a>

P1SecurityLast week, P1 Security was at MWC Barcelona, connecting with industry leaders to discuss the latest in mobile network security. From <a href="https://infosec.exchange/tags/5G" class="mention hashtag" rel="nofollow noopener" target="_blank">#5G</a> vulnerabilities to <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener" target="_blank">#AI</a> driven cyber threats, the conversations emphasized the need for advanced attack surface management, intrusion detection, and threat intelligence solutions.🙏 A special thank you to Business France for their incredible support and organization throughout the event.A huge thank you to our <a href="https://infosec.exchange/tags/partners" class="mention hashtag" rel="nofollow noopener" target="_blank">#partners</a>, <a href="https://infosec.exchange/tags/customers" class="mention hashtag" rel="nofollow noopener" target="_blank">#customers</a>, and industry <a href="https://infosec.exchange/tags/peers" class="mention hashtag" rel="nofollow noopener" target="_blank">#peers</a> who joined us to exchange insights and drive innovation in telecom security. Looking forward to what’s next!<a href="https://infosec.exchange/tags/MWC25" class="mention hashtag" rel="nofollow noopener" target="_blank">#MWC25</a> <a href="https://infosec.exchange/tags/TelecomSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelecomSecurity</a> <a href="https://infosec.exchange/tags/5GSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#5GSecurity</a> <a href="https://infosec.exchange/tags/CyberThreats" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberThreats</a> <a href="https://infosec.exchange/tags/AIinTelecom" class="mention hashtag" rel="nofollow noopener" target="_blank">#AIinTelecom</a> <a href="https://infosec.exchange/tags/P1Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#P1Security</a>

Patrick CoyleBills Introduced – 12-12-24 – 70 bills – 10408, security challenges of Signaling System 7 protocol – <a href="https://tinyurl.com/4w5jux3k" rel="nofollow noopener" target="_blank">https://tinyurl.com/4w5jux3k</a> <a href="https://qoto.org/tags/Legislation" class="mention hashtag" rel="nofollow noopener" target="_blank">#Legislation</a> <a href="https://qoto.org/tags/TelecomSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelecomSecurity</a>

P1Security🌐 P1 Security at GSMA FASG #30 🌐P1 Security will be at the GSMA FASG #30 in Sophia Antipolis, France, from November 5th to 7th! Representing us will be our Founder & CEO, Philippe Langlois, with over 30 years of network security expertise, and Martin Kacer, our Telecom Security Expert Researcher managing GSMA relations.If you're interested in exploring security solutions for critical mobile infrastructure, discussing the latest in telcosec, or simply connecting, don’t hesitate to reach out. We’d love to meet you!<a href="https://infosec.exchange/tags/FASG30" class="mention hashtag" rel="nofollow noopener" target="_blank">#FASG30</a> <a href="https://infosec.exchange/tags/TelecomSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelecomSecurity</a> <a href="https://infosec.exchange/tags/GSMA" class="mention hashtag" rel="nofollow noopener" target="_blank">#GSMA</a> <a href="https://infosec.exchange/tags/MobileNetworks" class="mention hashtag" rel="nofollow noopener" target="_blank">#MobileNetworks</a> <a href="https://infosec.exchange/tags/P1Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#P1Security</a> <a href="https://infosec.exchange/tags/Networking" class="mention hashtag" rel="nofollow noopener" target="_blank">#Networking</a>

Alex IvanovsUS Senate seeks clarification from AT&T over ‘easily preventable’ data breach<a href="https://stackdiary.com/us-senate-seeks-clarification-from-att-over-easily-preventable-data-breach/" rel="nofollow noopener" translate="no" target="_blank">https://stackdiary.com/us-senate-seeks-clarification-from-att-over-easily-preventable-data-breach/</a><a href="https://mastodon.social/tags/ATT" class="mention hashtag" rel="nofollow noopener" target="_blank">#ATT</a> <a href="https://mastodon.social/tags/DataBreach" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataBreach</a> <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybersecurity</a> <a href="https://mastodon.social/tags/Hacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hacking</a> <a href="https://mastodon.social/tags/Privacy" class="mention hashtag" rel="nofollow noopener" target="_blank">#Privacy</a> <a href="https://mastodon.social/tags/Security" class="mention hashtag" rel="nofollow noopener" target="_blank">#Security</a> <a href="https://mastodon.social/tags/Snowflake" class="mention hashtag" rel="nofollow noopener" target="_blank">#Snowflake</a> <a href="https://mastodon.social/tags/Ransom" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ransom</a> <a href="https://mastodon.social/tags/Bitcoin" class="mention hashtag" rel="nofollow noopener" target="_blank">#Bitcoin</a> <a href="https://mastodon.social/tags/Cybercrime" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cybercrime</a> <a href="https://mastodon.social/tags/Telecom" class="mention hashtag" rel="nofollow noopener" target="_blank">#Telecom</a> <a href="https://mastodon.social/tags/SensitiveData" class="mention hashtag" rel="nofollow noopener" target="_blank">#SensitiveData</a> <a href="https://mastodon.social/tags/USSenate" class="mention hashtag" rel="nofollow noopener" target="_blank">#USSenate</a> <a href="https://mastodon.social/tags/CustomerData" class="mention hashtag" rel="nofollow noopener" target="_blank">#CustomerData</a> <a href="https://mastodon.social/tags/DataProtection" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataProtection</a> <a href="https://mastodon.social/tags/Encryption" class="mention hashtag" rel="nofollow noopener" target="_blank">#Encryption</a> <a href="https://mastodon.social/tags/Malware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Malware</a> <a href="https://mastodon.social/tags/TwoFactorAuthentication" class="mention hashtag" rel="nofollow noopener" target="_blank">#TwoFactorAuthentication</a> <a href="https://mastodon.social/tags/Hackers" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hackers</a> <a href="https://mastodon.social/tags/CloudStorage" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudStorage</a> <a href="https://mastodon.social/tags/IdentityTheft" class="mention hashtag" rel="nofollow noopener" target="_blank">#IdentityTheft</a> <a href="https://mastodon.social/tags/Breach" class="mention hashtag" rel="nofollow noopener" target="_blank">#Breach</a> <a href="https://mastodon.social/tags/TechNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechNews</a> <a href="https://mastodon.social/tags/Metadata" class="mention hashtag" rel="nofollow noopener" target="_blank">#Metadata</a> <a href="https://mastodon.social/tags/DigitalSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#DigitalSecurity</a> <a href="https://mastodon.social/tags/TelecomSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelecomSecurity</a> <a href="https://mastodon.social/tags/DataLeak" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataLeak</a> <a href="https://mastodon.social/tags/FBI" class="mention hashtag" rel="nofollow noopener" target="_blank">#FBI</a> <a href="https://mastodon.social/tags/DOJ" class="mention hashtag" rel="nofollow noopener" target="_blank">#DOJ</a> <a href="https://mastodon.social/tags/Blockchain" class="mention hashtag" rel="nofollow noopener" target="_blank">#Blockchain</a> <a href="https://mastodon.social/tags/Infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infosec</a>

Pyrzout :vm:Hackers Using VPNs To Exploit Restrictions & Steal Mobile Data <a href="https://gbhackers.com/hackers-vpns-exploit-restrictions-steal-data/" rel="nofollow noopener" translate="no" target="_blank">https://gbhackers.com/hackers-vpns-exploit-restrictions-steal-data/</a> <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/TelecomSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelecomSecurity</a> <a href="https://social.skynetcloud.site/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://social.skynetcloud.site/tags/VPNExploits" class="mention hashtag" rel="nofollow noopener" target="_blank">#VPNExploits</a> <a href="https://social.skynetcloud.site/tags/DataTheft" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataTheft</a> <a href="https://social.skynetcloud.site/tags/vpn" class="mention hashtag" rel="nofollow noopener" target="_blank">#vpn</a>

Rich Stein (he/him)Surprise. No surprise. <a href="https://www.wsj.com/politics/national-security/china-internet-cables-repair-ships-93fd6320" rel="nofollow noopener" translate="no" target="_blank">https://www.wsj.com/politics/national-security/china-internet-cables-repair-ships-93fd6320</a> h/t <a href="https://infosec.exchange/@metacurity" class="u-url mention" rel="nofollow noopener" target="_blank">@metacurity</a> <a href="https://infosec.exchange/@metacurity/112466444861614722" rel="nofollow noopener" translate="no" target="_blank">https://infosec.exchange/@metacurity/112466444861614722</a> <a href="https://mastodon.social/tags/NationalSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#NationalSecurity</a> <a href="https://mastodon.social/tags/China" class="mention hashtag" rel="nofollow noopener" target="_blank">#China</a> <a href="https://mastodon.social/tags/telecommunications" class="mention hashtag" rel="nofollow noopener" target="_blank">#telecommunications</a> <a href="https://mastodon.social/tags/telecom" class="mention hashtag" rel="nofollow noopener" target="_blank">#telecom</a> <a href="https://mastodon.social/tags/telecoms" class="mention hashtag" rel="nofollow noopener" target="_blank">#telecoms</a> <a href="https://mastodon.social/tags/telecomsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#telecomsecurity</a>

ENISART by <a href="https://respublicae.eu/@enisa_eu" class="u-url mention" rel="nofollow noopener" target="_blank">@enisa_eu</a>: Erka Koivunen, CISO at Finavia - speaks about the evolution of crypto, at the ENISA Telecom security forum, here in Helsinki: "We are now in the golden age of encrypted communications." <a href="https://respublicae.eu/tags/telecomsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#telecomsecurity</a> <a href="https://respublicae.eu/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> @ekoivune <a href="https://respublicae.eu/@enisa_eu" class="u-url mention" rel="nofollow noopener" target="_blank">@enisa_eu</a>[2024-05-15 07:10 UTC]

BSI🚀 5G Security - entdecke pySCASso: Ein Python-Framework zur Automatisierung von GSMA NESAS SCAS Tests! Vom Team BSI entwickelt als Blaupause und Beispiel, lädt es zum Stöbern, zur Inspiration und zur Zusammenarbeit ein. Plattformunabhängig – Produktagnostische Testimplementierung - Minimalinvasiv. Besuche unser Projekt auf GitHub, um mehr zu erfahren und mitzuwirken: <a href="https://github.com/BSI-Bund/pySCASso" rel="nofollow noopener" translate="no" target="_blank">https://github.com/BSI-Bund/pySCASso</a> <a href="https://social.bund.de/tags/pySCASso" class="mention hashtag" rel="nofollow noopener" target="_blank">#pySCASso</a> <a href="https://social.bund.de/tags/TelecomSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelecomSecurity</a>

🛡 H3lium@infosec.exchange/:~# :blinking_cursor:"⚠️ Telecom Sector Under Siege: Over 1,500 RIPE NCC Network Credentials Leaked! ⚠️"The telecom industry faces a severe threat as over 1,572 network operator credentials, including those from Orange España, were found circulating in the Dark Web. This follows a recent cyberattack on Orange España, involving a BGP hijack. The attack led to a service outage and revealed the risks associated with privileged network personnel. Cybersecurity firm Resecurity's scan discovered compromised accounts from RIPE, APNIC, AFRINIC, and LACNIC registries, emphasizing the urgent need for improved digital hygiene and robust security measures.Tags: <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/TelecomSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelecomSecurity</a> <a href="https://infosec.exchange/tags/DigitalIdentity" class="mention hashtag" rel="nofollow noopener" target="_blank">#DigitalIdentity</a> <a href="https://infosec.exchange/tags/DataBreach" class="mention hashtag" rel="nofollow noopener" target="_blank">#DataBreach</a> <a href="https://infosec.exchange/tags/DarkWeb" class="mention hashtag" rel="nofollow noopener" target="_blank">#DarkWeb</a> <a href="https://infosec.exchange/tags/BGP" class="mention hashtag" rel="nofollow noopener" target="_blank">#BGP</a> <a href="https://infosec.exchange/tags/RPKI" class="mention hashtag" rel="nofollow noopener" target="_blank">#RPKI</a> <a href="https://infosec.exchange/tags/Infostealers" class="mention hashtag" rel="nofollow noopener" target="_blank">#Infostealers</a>Source: <a href="https://www.resecurity.com/blog/article/hundreds-of-network-operators-credentials-found-circulating-in-dark-web" rel="nofollow noopener" target="_blank">Resecurity</a>

P1SecurityThe stark reality of cyber threats for telecom sectors is unfolding in Ukraine. Russian Sandworm hackers have breached 11 Ukrainian telcos since May, posing grave security concerns. Uncover the intricate details of these cyber onslaughts here: Russian Sandworm hackers breached 11 Ukrainian telcos since May <a href="https://www.bleepingcomputer.com/news/security/russian-sandworm-hackers-breached-11-ukrainian-telcos-since-may/" rel="nofollow noopener" translate="no" target="_blank">https://www.bleepingcomputer.com/news/security/russian-sandworm-hackers-breached-11-ukrainian-telcos-since-may/</a>CERT-UA: Peculiarities of destructive cyber attacks against Ukrainian providers <a href="https://cert.gov.ua/article/6123309" rel="nofollow noopener" translate="no" target="_blank">https://cert.gov.ua/article/6123309</a><a href="https://infosec.exchange/tags/TelecomSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelecomSecurity</a> <a href="https://infosec.exchange/tags/CyberAttack" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberAttack</a> <a href="https://infosec.exchange/tags/UkraineTelecom" class="mention hashtag" rel="nofollow noopener" target="_blank">#UkraineTelecom</a>

🛡 H3lium@infosec.exchange/:~# :blinking_cursor:"🔍 Unveiling Sandman APT: The Silent Menace Targeting Global Telcos 🎯"SentinelLabs has unearthed a new threat actor dubbed Sandman APT, primarily targeting telecommunication providers across the Middle East, Western Europe, and South Asia. This enigmatic group employs a novel modular backdoor named LuaDream, utilizing the LuaJIT platform, a rarity in the threat landscape. The meticulous movements and minimal engagements hint at a strategic approach to minimize detection risks. The LuaDream malware, a well-orchestrated and actively developed project, is designed for system and user info exfiltration, paving the way for precision attacks. The intriguing part? The attribution remains elusive, hinting at a private contractor or a mercenary group akin to Metador. The activities observed are espionage-driven, with a pronounced focus on telcos due to the sensitive data they harbor. The meticulous design of LuaDream showcases the continuous innovation in the cyber espionage realm, urging for a collaborative effort within the threat intelligence community to navigate the shadows of the threat landscape.Source: <a href="https://www.sentinelone.com/labs/sandman-apt-a-mystery-group-targeting-telcos-with-a-luajit-toolkit/" rel="nofollow noopener" target="_blank">SentinelOne Labs</a>Tags: <a href="https://infosec.exchange/tags/SandmanAPT" class="mention hashtag" rel="nofollow noopener" target="_blank">#SandmanAPT</a> <a href="https://infosec.exchange/tags/LuaDream" class="mention hashtag" rel="nofollow noopener" target="_blank">#LuaDream</a> <a href="https://infosec.exchange/tags/TelecomSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#TelecomSecurity</a> <a href="https://infosec.exchange/tags/CyberEspionage" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberEspionage</a> <a href="https://infosec.exchange/tags/ThreatActor" class="mention hashtag" rel="nofollow noopener" target="_blank">#ThreatActor</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/LuaJIT" class="mention hashtag" rel="nofollow noopener" target="_blank">#LuaJIT</a> <a href="https://infosec.exchange/tags/SentinelLabs" class="mention hashtag" rel="nofollow noopener" target="_blank">#SentinelLabs</a> <a href="https://infosec.exchange/tags/APT" class="mention hashtag" rel="nofollow noopener" target="_blank">#APT</a> 🌐🔐🎯 Indicators of Compromise (IoCs):<ul><li>Domains: mode.encagil[.]com, ssl.explorecell[.]com</li><li>File Paths: %ProgramData%\FaxConfig, %ProgramData%\FaxLib</li><li>SHA1: <ul><li>fax.dat: 1cd0a3dd6354a3d4a29226f5580f8a51ec3837d4</li><li>fax.Application: 27894955aaf082a606337ebe29d263263be52154</li><li>ualapi.dll: 5302c39764922f17e4bc14f589fa45408f8a5089</li><li>fax.cache: 77e00e3067f23df10196412f231e80cec41c5253</li><li>UpdateCheck.dll: b9ea189e2420a29978e4dc73d8d2fd801f6a0db2</li><li>updater.ver: fb1c6a23e8e0693194a365619b388b09155c2183</li><li>fax.module: ff2802cdbc40d2ef3585357b7e6947d42b875884</li></ul></li></ul> Author: Aleksandar Milenkoski, a seasoned threat researcher at SentinelLabs, has meticulously dissected the activities of Sandman APT, shedding light on the LuaDream backdoor. His expertise in reverse engineering and malware research is evident in the detailed analysis provided.

ENISART @marnixdekker: We kicked off the <a href="https://respublicae.eu/tags/ENISA" class="mention hashtag" rel="nofollow noopener" target="_blank">#ENISA</a> Telecom security forum here in Lisbon - Trey Guinn @Cloudflare Field CTO, with a great talk about what is needed to have a secure global internet @treyguinn <a href="https://respublicae.eu/@enisa_eu" class="u-url mention" rel="nofollow noopener" target="_blank">@enisa_eu</a> <a href="https://respublicae.eu/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#cybersecurity</a> <a href="https://respublicae.eu/tags/telecomsecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#telecomsecurity</a> <a href="https://t.co/BvCQ8O6smK" rel="nofollow noopener" target="_blank">https://t.co/BvCQ8O6smK</a> 🐦🔗: <a href="https://n.respublicae.eu/enisa_eu/status/1661323009674625029" rel="nofollow noopener" target="_blank">https://n.respublicae.eu/enisa_eu/status/1661323009674625029</a>

Recent searches

Search options

Administered by:

Server stats:

#telecomsecurity