SS-NEWS-085: Deepfake Hysteria, IIS Server Logs as C2!

Episode 85 November 07, 2022 00:29:17
SS-NEWS-085: Deepfake Hysteria, IIS Server Logs as C2!
Security Serengeti
SS-NEWS-085: Deepfake Hysteria, IIS Server Logs as C2!

Nov 07 2022 | 00:29:17

/

Show Notes

Several short stories for your consideration on this fine November day.

First, Sophos thinks we're on the hysteria part of the FUD Curve where Deepfakes are concerned, and we agree (as if our opinion mattered).  Then we discuss Bitcoin Mining Firms possibly going bankrupt.  Not really security related, but hey, it was interesting.  The Samsung is introducing Maintenance Mode for when you have to hand your phone over to be repaired!  Finally, the most interesting, the use of IIS Web Logs for command and control... this is amazing.  Unfortunately, the article didn't have a ton of information, but it's a really cool new method!

Article 1 - Phishing works so well crims won't bother with deepfakes, says Sophos chap

Article 2 - World’s largest Bitcoin mining firm Core Scientific on the verge of insolvency

Article 3 - Maintenance Mode aims to keep phone data private during repairs

Article 4 - Hackers use Microsoft IIS web server logs to control malware
Supporting Article(s):
Cranefly Cyberspy Group Spawns Unique ISS Technique

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

Other Episodes

Episode 1

March 14, 2021 00:53:41
Episode Cover

SS-NEWS-001 - Introducing the Security Serengeti!

Hosted by David Schwendinger and Matthew Keener, welcome to the Security Serengeti! Please join us for our introductory episode where we take a look...

Listen

Episode 32

October 24, 2021 00:24:17
Episode Cover

SS-CONF-32: Splunk .conf 21, Part 1

In this episode, we talk .Conf!  David and I attended Splunk .conf remotely and sit down to discuss this years presentations and announcements.  Unfortunately,...

Listen

Episode 23

August 23, 2021 00:45:45
Episode Cover

SS-NEWS-23: How to stop ransomware? Ban payments?

In this week's episode, we end up spending wayyyyy too long talking about a Lawfare article on banning ransomware payments.  We had some other...

Listen