BC INTERNET

Saved by @Alex1Powell

Kyle Hanslovan
@KyleHanslovan 3 years, 4 months ago 970 views

Save to PDF Share See On Twitter

Only 1 / 67 antivirus engines list SUNBURST backdoor as malicious - SolarWinds.Orion.Core.BusinessLayer.dll https://t.co/taaiUtSJzR #SUNBURST #UNC2452

SolarWinds' digital certificate hasn't been revoked yet.

The full compromised package is still being hosted online as well 😓 hxxps://downloads.solarwinds[.]com/solarwinds/CatalogResources/Core/2019.4/2019.4.5220.20574/SolarWinds-Core-v2019.4.5220-Hotfix5.msp

Job class within the backdoored #Sunburst DLL is pretty straight forward and aligns with @FireEye's analysis. CollectSystemDescription:

DeleteFile

DeleteRegistryValue

FileExists

#UNC2452 prefers MD5 for their file hashing routine

#UNC2452's DirList is savvy enough to always expand environment variables. Doesn't appear to have any recursion or depth arguments for DirWalk'ing.

Use of token manipulation was underwhelming. Sets process privilege to SeTakeOwnershipPrivilege, SeRestorePrivilege, and SeShutdownPrivilege.

Domain1 = https://t.co/BGPAyeprMm
(just like the report said). Thus far all analysis has held up (no real surprise there).

One of the anomalous #SUNBURST DLLs from October 2019 that Microsoft highlighted can be found in the SolarWinds Coreinstall.msi for 2019.4.5220.20161 - hxxps://downloads.solarwinds[.]com/solarwinds/CatalogResources/Core/2019.4/2019.4.5220.20161/CoreInstaller.msi

Malicious #SUNBURST DLL CE77D116A074DAB7A22A0FD4F2C1AB475F16EEC42E1DED3C0B0AA8211FE858D6 from May 2020 can be found in CoreInstaller.msi for 2020.2.5320.27438 -hxxps://downloads.solarwinds[.]com/solarwinds/CatalogResources/Core/2020.2/2020.2.5320.27438/CoreInstaller.msi

Malicious #SUNBUST DLL 019085A76BA7126FFF22770D71BD901C325FC68AC55AA743327984E89F4B0134 from April 2020 can be found in CoreInstaller.msi for 2020.2.5220.27327 - hxxps://downloads.solarwinds[.]com/solarwinds/CatalogResources/Core/2020.2/2020.2.5220.27327/CoreInstaller.msi

More from Internet

foone
@Foone

WHO STOLE MY DISK SECTOR

what

this is a different disk.

did two disks on my desk go bad at the same time? or is this USB drive A USELESS FAILURE?

ok I'm trying a third disk and if this fails this drive is going right in the lake

it wrote successfully! now I can install some MS-DOS 6.22

dang it. after all that time installing it, it can't boot.
it doesn't even fail to boot, it just hangs at boot

some stupid problem with partitioning/mbr, probably

Jake Williams
@MalwareJake

Twas the night before Christmas and all over the ‘net,
Not a creature was stirring except a few cyber threats
The firewalls were configured at the egress with care,
But that wouldn’t stop us from being hit by ransomware. 1/

The children were nestled all snug in their beds,
While attackers hit the web server and established a beachhead
Mama with her EDR and I with my IDS
Were ready to tackle this hot infosec mess. /2

Down in the SOC there arose such a clatter,
I logged into my dashboard to see what was the matter.
This thing had better work, it cost so much cash.
How in 2020 can this thing STILL require Flash?! 3/

The alerts lit up the dashboard, it produced such a glow
But it’s because the threshold for alerting was configured so low.
When what to my wondering eyes did appear,
But 300 false positive alarms. I thought “I’ll be here all year.” 4/

Then a little old DLL, signed by SolarWinds,
Was really the Russians, masters of supply chain break-ins.
We need some new vendors said the CISO, and the salespeople came. 5/

Advertisement

Chris Fallica
@chrisfallica

Data drop! Some numbers, nuggets and trends for bowl season which I find interesting...

Miami has lost 9 of its last 10 bowl games and is 2-10 ATS in its last 12 bowl games. Oklahoma State has covered each of its last four bowl games, three coming as an underdog.

This is the first time since 2011 Texas is favored in a bowl game...

Wisconsin has won five of their last six bowl games with the only loss in that span a one-point loss to Oregon last year in the Rose Bowl. Each of Wake Forest’s last five bowl games have been one-possession games (6, 3, 3, 8, 6)...

Mike Leach coached teams are 1-9 ATS in their last ten bowl games (4-6 SU). Included in those ten games are four outright losses and a 1-7 ATS mark as a favorite. In the last five years, Leach’s teams have averaged 19.6 PPG in bowl games (28 is the high in that span)...

Chris Heilmann
@codepo8

🚨 🦮 Seven ways to test for accessibility using only what is already in browser developer tools of Chromium browsers https://t.co/C7kdbigHGE

@MSEdgeDev @EdgeDevTools @ChromiumDev
#tools #accessibility #browsers
Also, a thread: 👇🏼

Issues pane, powered by @webhintio, listing accessibility issues with explanations why these are problems, links to more info and direct links to the tools where to fix the problem. https://t.co/4K5RynHhbg

The inspect element overlay showing accessibility relevant information of the element, including contrast information, ARIA name, role and if it can be focused via keyboard.

Colour picker with contrast information offering colours that are AA/AAA compliant. You can also see compliant colours indicated by a line on the colour patch.
Note: the current algorithm fails to take font weight into consideration, that's why there will be a new one.

Vision deficit ("colour blindness") emulation. You can see what your product looks like for different visitors.
https://t.co/bxj1vySCAb

caragokil - tutorial
@caragokiltutor1

How to Remove Background Images

Photoshop is one of the best software for manipulating images (editing). This software made by the Adobe company has proven effective in producing new edited images that are different from the original. One of the most common types of photo editing in Photoshop is removing the.

You May Also Like

STEALTH JEFF
@drawandstrike

So it's now October 10, 2018 and....Rod Rosenstein is STILL not fired.

He's STILL in charge of the Mueller investigation.

He's STILL refusing to hand over the McCabe memos.

He's STILL holding up the declassification of the #SpyGate documents & their release to the public.

I love a good cover story.......

The guy had a face-to-face with El Grande Trumpo himself on Air Force One just 2 days ago. Inside just about the most secure SCIF in the world.

And Trump came out of AF1 and gave ol' Rod a big thumbs up!

And so we're right back to 'that dirty rat Rosenstein!' 2 days later.

At this point it's clear some members of Congress are either in on this and helping the cover story or they haven't got a clue and are out in the cold.

Note the conflicting stories about 'Rosenstein cancelled meeting with Congress on Oct 11!"

First, rumors surfaced of a scheduled meeting on Oct. 11 between Rosenstein & members of Congress, and Rosenstein just cancelled it.

Rep. Andy Biggs and Rep. Matt Gaetz say DAG Rod Rosenstein cancelled an Oct. 11 appearance before the judiciary and oversight committees. They are now calling for a subpoena. pic.twitter.com/TknVHKjXtd
— Ivan Pentchoukov \U0001f1fa\U0001f1f8 (@IvanPentchoukov) October 10, 2018

$\u2745\u1710\u170b\u1713\u170e$

❅ᜐᜋᜓᜎ...
@uglyluhan

First thread of the year because I have time during MCO. As requested, a thread on the gods and spirits of Malay folk religion. Some are indigenous, some are of Indian origin, some have Islamic

i wonder if you can make a thread bout witchcraft in malaysia.. or list of our own local gods/deites..
— r a y a \U0001f319 (@lcvelylilith) February 20, 2020

Before I begin, it might be worth explaining the Malay conception of the spirit world. At its deepest level, Malay religious belief is animist. All living beings and even certain objects are said to have a soul. Natural phenomena are either controlled by or personified as spirits

Although these beings had to be respected, not all of them were powerful enough to be considered gods. Offerings would be made to the spirits that had greater influence on human life. Spells and incantations would invoke their

Animist ceremonies of a religious or magical nature were normally held for the purpose of divination or making a request. This would either be done at a keramat or at a shrine similar to the Thai spirit houses or Chinese roadside shrines pic.twitter.com/I1hliyi0x3
— \u2745\u1710\u170b\u1713\u170e (@uglyluhan) June 16, 2019

Two known examples of such elemental spirits that had god-like status are Raja Angin (king of the wind) and Mambang Tali Arus (spirit of river currents). There were undoubtedly many more which have been lost to time

Contact with ancient India brought the influence of Hinduism and Buddhism to SEA. What we now call Hinduism similarly developed in India out of native animism and the more formal Vedic tradition. This can be seen in the multitude of sacred animals and location-specific Hindu gods

Advertisement

Kirsti Miller
@KirstiMiller30

@FionaPearman @ScottMorrisonMP Morrison is our statue of unempathic neoliberalism - erected by evangelical and corporate Australia to celebrate their victory over compassion, equality and secular humanism.

Hopefully it gets pulled down like the statues of dubious heroes of oppression from an earlier age.

@ScottMorrisonMP The two-party-preferred system in
Australia politics isn’t working for people, and it sure isn’t working for the planet.

@ScottMorrisonMP My collapse of faith in our democracies isn’t an accident. It’s one of the central victories of the neoliberal project, delivered through two generations of privatisation, outsourcing and deregulation, underfunding of government services (locked in by tax cuts),...

@ScottMorrisonMP restricting freedom of information, targeting whistleblowers and raiding the media who report on them, delegitimising and gagging public interest advocacy, and criminalising protest.

@ScottMorrisonMP Politics in Australia today relies hugely on the fact that most people don’t know most of what’s going on so as to get away with stuff that couldn’t be done under real scrutiny we have seen a clear example of this with the National Coronvirus Cabinet.

$ArmaniTalks \U0001f399\U0001f525$

ArmaniTalks 🎙🔥...
@ArmaniTalks

A relationship begins to get stiff when excessive patterns begin to form.

Too many patterns leads to a boring, predictable, logical lifestyle.

Get the emotions involved.

Do something spontaneous out of the blue moon & flip the script.

'What's wrong with the patterns?'

Nothing is wrong with patterns.

However, there is a problem when all you have are patterns.

It's boring.

'Can you explain why?'

Sure 👇

The thing with relationships is that it's meant to be an emotional experience.

It's very difficult to logically explain love, right?

'Right.'

Well this is where you want to steer the ship the right way.

1. Too emotional is bad.

2. Too logical is bad.

Let me break it down.

1. Too emotional

If a relationship is completely ruled by emotions, then it's too volatile.

You will never reach productivity if you are aimlessly only following each others emotions.

This lifestyle tarnishes any structure for the couple.

'So why do people do it?'

Because it's fun.

You may ruled by this stage in the honeymoon phase.

Normal.

You'll be so spontaneous that it almost becomes a lifestyle.

But it's hard to level up your life when you're too spontaneous.

Avoid.

David Neiwert
@DavidNeiwert

1) “Eliminationism” is a term you need not just to become familiar with, especially in today’s American rush toward authoritarianism. This will be a long, illustrated thread explaining what it means, how it works, and why Donald Trump is now our Eliminationist in Chief.

Warning: Some images contain violence and are disturbing.

Also warning: This thread is ridiculously long. 75 tweets is insane. I apologize. But this stuff is important. I hope you find it compelling anyway. If not, I understand.

2) So, what exactly do we mean by “eliminationism”? Here’s the academic definition:

3) It was largely coined by Holocaust scholar Daniel Jonah Goldhagen in his 1996 book Hitler’s Willing Executioners, about the role ordinary Germans played in the Holocaust, which he described as fueled by “eliminationist antisemitism.”

4) The book describes how in reality the largest numbers of Jews and other victims killed by Nazi directive were rounded up and gunned down or immolated en masse and buried in mass graves by ordinary Germans and non-Jewish residents of German-occupied territories.