• Home
  • Archive by category 'In the News'

Archive for ‘In the News’

BSidesLondon 2013 – How a Free Infosec Conference in London Changed Everything

A rookie/mentor focused track of talks, that’s all it took, something so inviting to up-and-comers from universities, governments and corporations within the computer security industry that secured BSidesLondon 2013 as a “must attend” Infosec conference for 2014 and beyond.
Hasn’t This Been Done Before?
It seems so easy, I mean there has to have been this type …

Read More
 

APT #TargetedAttacks within @SocialMedia

By Wes Hurd (Cyber Threat Analyst)

When we think of Advanced Persistent Threats (APT), we often associate APT intrusion vectors with spearphishing email messages that contain either a malicious attachment or link to a malicious website location. Many enterprise security teams often overlook, or fail to consider, how online profiles within social networking sites (SNS) can …

Read More
 

A Tale of Two Koreas: Keeping Watch over the Digital DMZ

By Wes Hurd (Cyber Threat Analyst)

At Cyber Squared, we understand that many targeted, government sponsored or sanctioned attacks can be directly tied to current geopolitical events. Keeping the recent instability of the Korean Peninsula in mind, and the fact that the Chinese Communist Party has a vested interest in Korean affairs, we have kept …

Read More
 

RSA 2013 - The Year of Threat Intelligence

The RSA conference this year was abuzz with talk of threat intelligence and its usage in detecting and protecting against more advanced threats. There was re-branding of existing products and the entrance of new products, all of which claimed to support some type of “intelligence” capability.  As I walked around it struck me …

Read More
 

I Got 99 Problems But a Phish Ain’t One

Today Symantec reported a targeted attack that used the Mandiant APT1 report as bait for a spearphishing attack. Brandon Dixon at 9b+ followed up with the analysis of “Mandiant_APT2_Report.pdf” and identified the command and control infrastructure as itsec.eicp[.]net, reminding us that same infrastructure was also used to target OSX users in the 5 December …

Read More
 

Burning Down the House for Fun and Profit

In October of 1962, during the buildup to the Cuban Missile Crisis, a debate between Adlai Stevenson and Valerian Alexandrovich Zorin at the United Nations Security Council, revealed how far the U.S. was willing to go to produce evidence that the Soviet Union was indeed stockpiling tactical nuclear weapons and ballistic missiles in North …

Read More
 

Just the Tip of the Iceberg

Two weeks ago the New York Times (NYT), Wall Street Journal (WSJ), Dow Jones (DJ) and Washington Post (WP) all reported being targeted and exploited by Chinese Advanced Persistent Threat (APT) groups.  In most cases, the compromises had reportedly been going on for quite some time and were severe enough that the …

Read More
 

Malware Delivery – Understanding Multiple Stage Malware

To some of us, seeing an email with malware embedded in a PDF, Word or Excel attachment is common. In fact, it has become the new norm for malware delivery to use file types that are not obviously malicious (versus something like a .exe). Gone are the days of wide-open acceptance of all file extensions …

Read More
 

Bloomberg Takes Interest in Cyber Squared

Bloomberg ran a Cyber Espionage piece called, “Hackers Linked To China’s Army Seen from EU to D.C” on July 26 that featured information derived from Cyber Squared’s Project Enlightenment.  In response to the article, Bloomberg TV’s “First Up” program hosted a live interview with me …

Read More
 

Anatomy of a Spearphishing Attack

In blogs past, we have discussed the importance of Cyber Security, and how it is one of the most important pieces of the Information Assurance puzzle.  One of the greatest problems that we continue to face as Network Defenders and Information Assurance professionals is human error. We spend millions …

Read More