New Way to run VBScript Payload

Some day ago I received an email in an unmarked Gmail mail box. It was a clear Phishing email, but what catched my eyes has been a Password reported into the email's body and the attachment. It was a Microsoft Word file with ".docx" extension. The first question that I asked to myself was:...

Read More

Retrieve Personal Information using Boarding Pass Published on Social Networks

This article want to be a POC (Proof of Concept) about how an attacker with bad intention could use your pictures published into Social Networks to retrieve information about you. Are you readyyyyy?? ...Here we goooo!! In the last days I discovered a Web Site that works like an OCR, it can...

Read More

The Threat Behind an Italian Phishing Campaign

According to Wikipedia (https://en.wikipedia.org/wiki/Phishing) Phishing is the attempt to obtain sensitive information such as usernames, passwords, and credit card details (and sometimes, indirectly,money), often for malicious reasons, by masquerading as a trustworthy entity in an electronic...

Read More

Hackers Vs Hackers - Equation Group's Cyber Weapon Leaked

One week ago in Pastebin website, a new paste was posted, its title is "Equation Group - Cyber Weapons Auction". This paste seems to be published by a group of hackers called Shadow Brokers. The group claims to have attack tools and exploits which is probably attributable to hacker group...

Read More