Infosec quotes - block HTA scripts

“...hta powersploit script targeting energy sector ... If you don’t block hta files yet you should ...”

https://twitter.com/professor__plum/status/963172936352804864?s=21 

Infosec quotes - infected by your router

Get infected while configuring your home router.

“... Winbox Loader, an application developed ... to help users configure their routers.’ ... works by downloading some DLLs from the router itself, but the Slingshot group replaced these files with malicious ones that infected the user when he tried to configure  his router ...”

https://twitter.com/6ix7ine/status/972195225966927872?s=21 

Infosec quotes - server patching

“... if you have Windows Servers (including 2012 and 2016) which didn’t get hit by WannaCry but still aren’t patched for MS17-010 (SMB1 vulns) then patch now, there’s a crypto mining worm...”

https://twitter.com/gossithedog/status/972063387826958337?s=21 

Infosec quotes - more hardcoded passwords

This shouldn’t be happening anymore and you’d hope that all of them have been found by now. Wow.

“... Cisco says that an attacker could exploit this vulnerability (CVE-2018-0141) by connecting to the affected system via Secure Shell (SSH) using the hardcoded password...”

https://twitter.com/jan0fficial/status/971971981414297601?s=21 

Infosec quotes - always another way

Blacklisting doesn’t work. There always another way. 

“... filter cmd.exe ? try this 

rundll32.exe shell32.dll,ShellExec_RunDLL calc.exe ...”

 https://twitter.com/evi1cg/status/971296788601765888?s=21 

Infosec quotes - google internal admin pages

The dangers of hooking a company up to the internet in any fashion.

“... Bypassing Google’s authentication to access their Internal Admin panels...”

https://twitter.com/malwaredev/status/971027329161007106?s=21 

Infosec quotes - mailchimp malware

Mailchimp delivering malware invoices since December.

https://twitter.com/gossithedog/status/970666453090406406?s=21