H2020 SISSDEN Project

SISSDEN is an H2020 EU project (Grant Agreement 700176) that plans to improve cyber security in the EU by providing free-of-charge victim notification services.

[H2020 SISSDEN Project @sissden]

This project receives funding from the @EU_H2020 Research and Innovation Programme. Any related tweets reflect only the views of the project owner.

[H2020 SISSDEN Project @sissden]

Check out our video summarizing the H2020 SISSDEN project here: https://t.co/nWxXeex88n

[Adel Ka @0x4D31]

just released fatt; a script for extracting network metadata and fingerprints from pcap files and live network traffic. Go fingerprint all the things! https://t.co/eqSiIQab6D #honeypot #ThreatHunting

[MISP (@[email protected]) @MISPProject]

A clever use of MISP from the @sissden project which extracts malware configuration into specific MISP objects to browse and share the collected configuration and indicators. https://t.co/QuIAcmXsAR #ThreatIntel

[Piotr Bazydło @chudyPB]

My very quick look at recent Oracle Weblogic exploitation attempts.

https://t.co/Km6G3ILzOO

[H2020 SISSDEN Project @sissden]

A quick look into recent Oracle Weblogic 0day exploitation attempts https://t.co/RaFoKc6Zk0

[H2020 SISSDEN Project @sissden]

Interested what honeypot types and amounts are currently deployed in SISSDEN? Have a look here now: https://t.co/hpe7cFNBV7

[Lukas Rist @glaslos]

Prevalence of #IoT Protocols in Telescope and #honeypot Measurements https://t.co/AgONcR1Axh

[Florian Roth ⚡️ @cyb3rops]

Dear CERT / CSIRT,
Dear ITSec service provider,

if journalists can use an Nmap to scan for #Winnti infections, then you can do it too.

Script (as shared before in March 2018)
https://t.co/VMcNNluFJp

#Bayer #BayerHack

[H2020 SISSDEN Project @sissden]

Current SISSDEN honeypot sensor IP map - 255 sensors delivered in 58 countries, 981 IPs, 383 /24's, 119 unique ASNs. Subscribe to free SISSDEN reports here: https://t.co/obfadchrWG

[H2020 SISSDEN Project @sissden]

Running the latest T-Pot as a vetted SISSDEN user? You can now contribute your data to SISSDEN! Check out how in this blog post https://t.co/7wv7B9GAGB T-Pot 19.03 is available here: https://t.co/Egfmj2L4Wm

[H2020 SISSDEN Project @sissden]

You can subscribe to free daily SISSDEN reports using the Customer Portal at https://t.co/xU3o6TFQJj. These include reports on IoT related malware propagation, brute force attacks, various forms of scanning activity, remote exploitation attempts, DDoS amplification attacks, etc

[H2020 SISSDEN Project @sissden]

The SISSDEN Project is also present at the #firstcti event in London. See you there!

[FIRST.org @FIRSTdotOrg]

good morning #firstcti attendees! training day today! reg opens at 8am - be sure to double check what session you reg'd for and which building you need to propel your body towards this morning :-) https://t.co/May8pArmmq

[H2020 SISSDEN Project @sissden]

Finding perpetrators behind amplification DDoS attacks may sound like a daunting task due to the source spoofing and reflected nature of the attacks. Is it really that hopeless though? Read up on our methodology here: https://t.co/OObmGgYEzD and paper: https://t.co/dueOa8FHvH

[H2020 SISSDEN Project @sissden]

Our project is at the @tfcsirt and @FIRSTdotOrg symposium this week in Tallinn! Come and meet us to discuss honeypot networks and please consider hosting our sensor! https://t.co/GIM73KMHbR

[CERT Polska @CERT_Polska_en]

In our newest blogpost, we're describing #MWDB - our new database of samples and various information gathered from malware. We're also inviting malware analysts to cooperate with us, more details can be found in the article.
https://t.co/wNDHSLGonA

[H2020 SISSDEN Project @sissden]

An overview of the SISSDEN honeypot sensor network: currently 226 sensors operational. 953 IPs spread across 112 ASNs and 58 countries. Check out the maps here: https://t.co/GIM73KMHbR

[Lukas Rist @glaslos]

Approaches for Preventing Honeypot Detection and Compromise
https://t.co/jTGrVQpVGN

[abuse.ch @abuse_ch]

Heads-up, Emotet / Heodo is back in town!

URLhaus:
https://t.co/fkDITyH9GT

Feodo Tracker:
https://t.co/xm8sDqFMhH

[CIRCL - @[email protected] @circl_lu]

We did some quick statistics on the top 30 most queried CVE on https://t.co/3AcAfc6jer (via the API) - it's giving an insight and/or perception of the most popular vulnerabilities queried (by users and/or adversaries). #vulnerability