https://malgregator.com/tags/wikileaks/ Recent content in Wikileaks on malgregator Hugo -- gohugo.io en you@example.com you@example.com Fri, 18 May 2018 12:15:00 +0000 https://malgregator.com/post/week-20-2018/ Fri, 18 May 2018 12:15:00 +0000 you@example.com https://malgregator.com/post/week-20-2018/ Major (probably not only) US cell carriers are selling access to the real-time phone location data. Because, you know the Electronic Communications Privacy Act only restricts telecommunication companies from disclosing data to the government, it doesn't restrict disclosure to other companies. Which can resell back to the gov. Hacker News discussion on a topic is quite informative. https://malgregator.com/post/week-18-2018/ Thu, 03 May 2018 20:48:00 +0000 you@example.com https://malgregator.com/post/week-18-2018/ Multiple tech giants like Apple, Microsoft, Google and others formed an industry coalition and have joined security experts in criticizing encryption backdoors, after Ray Ozzie's CLEAR key escrow idea was widely derided. He basically proposed a scheme where the users have no control over their own devices, but the devices can be securely forensically analyzed by the government agencies. https://malgregator.com/post/week-45-2017/ Thu, 16 Nov 2017 07:20:00 +0000 you@example.com https://malgregator.com/post/week-45-2017/ Researchers exploited antivirus software quarantine mechanism to gain privileges by manipulating the restore process from the virus quarantine. By abusing NTFS directory junctions, the AV quarantine restore process can be manipulated, so that previously quarantined files can be written to arbitrary file system locations. https://malgregator.com/post/week-32-2017/ Tue, 15 Aug 2017 17:15:00 +0000 you@example.com https://malgregator.com/post/week-32-2017/ The lone Nigerian guy is responsible for an attack against at least 4000 gas, oil, banking, infrastructure organizations using phishing and NetWire trojan for remote access. https://malgregator.com/post/week-27-2017/ Tue, 11 Jul 2017 17:58:00 +0000 you@example.com https://malgregator.com/post/week-27-2017/ WikiLeaks has published documents detailing two alleged CIA implants, BothanSpy and Gyrfalcon, designed to steal SSH credentials from Windows and Linux. https://malgregator.com/post/week-26-2017/ Tue, 04 Jul 2017 22:30:00 +0000 you@example.com https://malgregator.com/post/week-26-2017/ The ExPetr/Petya ransomware which hits the Ukraine last week is actually a disk wiper. Victims are not able to decrypt their data, as the encryption key is not stored anywhere. https://malgregator.com/post/week-24-2017/ Tue, 20 Jun 2017 23:50:00 +0000 you@example.com https://malgregator.com/post/week-24-2017/ Erebus ransomware distributed by the malicious advertisement campaign is using Rig exploit kit to infect Linux servers across the world. Some companies had to pay already. https://malgregator.com/post/week-22-2017/ Mon, 05 Jun 2017 22:22:00 +0000 you@example.com https://malgregator.com/post/week-22-2017/ Notoriously known Gh0st RAT spyware is spreading through the same SMB vulnerability as a WannaCry ransomware. https://malgregator.com/post/week-20-2017/ Sun, 21 May 2017 21:00:00 +0000 you@example.com https://malgregator.com/post/week-20-2017/ Researchers published WannaCry ransomware decryption tool for older Windows (XP, 2003, 7). It uses bug in the Windows Crypto API which does not immediately erase private key. The application is crawling the computer memory, looking for the prime numbers which can divide the public key used for the encryption. https://malgregator.com/post/week-19-2017/ Tue, 16 May 2017 22:50:00 +0000 you@example.com https://malgregator.com/post/week-19-2017/ You have probably heard about the WannaCry/WannaCrypt/WannaWhatever worm spreading ransomware, because of the sensation created by parties profiting from the scare tactics. But also because it is using really good spreading technique - exploiting MS17-010 SMB vulnerability leaked from the NSA. Some post-mortem analysis of the first version (with the killswich) and TheShadowBrokers blog are listed below. Crypto is working, so no trivial decrypter is probable, except if the keys are published.