Jan Kopriva

Just one of the infosec crowd.

[Jan Kopriva @jk0pr]

You may find links to new content I've published on https://t.co/mkRumnLeWW at @UntrustedNet.

[Jan Kopriva @jk0pr]

@bugfireIO Thank you, @bugfireIO, and I will send you a link to a file with body of the e-mail in a DM...

[SANS.edu Internet Storm Center @sans_isc]

The strange case of disappearing Russian servers https://t.co/sCpjfUb6nb

[Untrusted Network @UntrustedNet]

Dnes jsem byl pozván do vysílání odpoledního Studia ČT 24, kde jsem odpovídal na otázky spojené s aktuálními výpadky spojenými s chybnou aktualizací pro senzory CrowdStrike Falcon pro Windows...
https://t.co/rF7GFHceXB

[Jan Kopriva @jk0pr]

Few weeks ago, I came across a somewhat unusual phishing message that used a slight twist on the "reply-chain" theme to make it through e-mail filters.

It is not new, but since I didn't find any write-ups of it anywhere, I wrote a short article, which you may find bellow...

[SANS.edu Internet Storm Center @sans_isc]

"Reply-chain phishing" with a twist https://t.co/qqMIMach2Z

[SANS.edu Internet Storm Center @sans_isc]

Support of SSL 2.0 on web servers in 2024 https://t.co/VnkoagQ2qh

[SANS.edu Internet Storm Center @sans_isc]

It appears that the number of ICS accessible from the internet has risen by 30 thousand over 3 years https://t.co/ijfLelgCtW

[Jan Kopriva @jk0pr]

It occurred to me that the current situation surrounding the xz-utils backdoor might present a good opportunity for a quick analysis to see if national or governmental CSIRTs/their host organizations/similar entities publish security advisories during holidays...

[SANS.edu Internet Storm Center @sans_isc]

The xz-utils backdoor in security advisories by national CSIRTs https://t.co/8NrlIGKz5T

[Jan Kopriva @jk0pr]

An open redirect vulnerability exists in what remains of the Google Web Light service, and it is being actively exploited by threat actors in multiple phishing campaigns...

#phishing #Google #vulnerable

https://t.co/JzdNQusSPN

[Jan Kopriva @jk0pr]

@sans_isc @internetarchive

[Jan Kopriva @jk0pr]

Threat actors generally like to use legitimate third-party online services to host malicious content, since it makes their job significantly easier. And - unfortunately - even the Internet Archive is no exception in this regard...

[SANS.edu Internet Storm Center @sans_isc]

Phishing pages hosted on https://t.co/PlDWCzNEma https://t.co/QAOnaw8Foz

[SANS.edu Internet Storm Center @sans_isc]

Computer viruses are celebrating their 40th birthday (well, 54th, really) https://t.co/UZJT6IYu7e

[Jan Kopriva @jk0pr]

The smallest and largest #malware samples that were "caught" by my e-mail trap in 2023 were a small (<2 kB) VBScript file and a very large (350 MB) EXE... And what might come as a surprise is, that these two samples were pretty much functionally identical. https://t.co/VFPmMKx1mX

[SANS.edu Internet Storm Center @sans_isc]

Phishing page with trivial anti-analysis features https://t.co/AH6FExcqVC

[Jan Kopriva @jk0pr]

I was recently asked whether typos were still a useful indicator for identifying phishing messages. To answer this question, I wrote a short post, which was just published on the Internet Storm Center website...

[SANS.edu Internet Storm Center @sans_isc]

Are typos still relevant as an indicator of phishing? https://t.co/dVuWYEIbWX

[ALEF Security @AlefSecurity]

Co se stalo v září?🤔

Novinkami a událostmi z kyberprostoru vás tradičně provedou @StanleyNovo a @jk0pr. Tentokrát se věnovali novinkám, jako:

👉Ransomware Útok na MGM a Caesars
👉Severokorejští Hackeři a Kyberloupež
👉Čína vs USA
👉Microsoftu Unikly Desítky TB Dat
👉Kybernetické Útoky Jako Mezinárodní Zločiny
👉Británie Odkládá Plány na Scanování Zpráv s E2E Šifrováním
👉OpenSSL 1.1.1 End of Life
👉Doporučení pro Manažery a Architekty KB

#ITbezpecnost #CyberSecurity #Novinky #SecurityCast

[Jan Kopriva @jk0pr]

Last week, I came across an interesting phishing, in which a text with zero font size was used in quite a novel way in order to make the message appear more trustworthy. You may find details in the article linked below...

[SANS.edu Internet Storm Center @sans_isc]

A new spin on the ZeroFont phishing technique https://t.co/cZAoUC0L77

[Jan Kopriva @jk0pr]

A new Diary of mine was published today on the SANS Internet Storm Center website. In this one, we’ll take a look at a simple phishing which demonstrates quite well that the cost of committing cybercrime can unfortunately be extremely low…

[SANS.edu Internet Storm Center @sans_isc]

The low, low cost of (committing) cybercrime https://t.co/9ICh4qj4Wy

[Jan Kopriva @jk0pr]

One doesn't often find malware with 0 detections on VirusTotal, especially if it isn't completely new... Nevertheless, it seems I was “lucky” - a malicious batch file, which was used in a last week's phishing campaign I came across is still at zero…
https://t.co/dUDYI2DTj1

[Jan Kopriva @jk0pr]

@nmeirmanov Since they don't seem to have their own CSIRT and no security-related contats were published on their site, i reached out to the generic "contact us" telecom@ e-mail ddress (I tried security@ as well, but that message bounced)...

[Jan Kopriva @jk0pr]

It can be quite surprising to find out what devices accessible from the internet still support SSLv2. It seems that in Kazakhstan, where such devices are most common, over 166 thousand SSLv2-enabled devices are last-mile network boxes used by the largest national ISP...

[SANS.edu Internet Storm Center @sans_isc]

Kazakhstan - world’s last SSLv2 superpower https://t.co/Vob4CY84aw