Remove Communications Remove Computer and Electronics Remove File names Remove Tools
article thumbnail

APT34: Glimpse project

Security Affairs

On April 19 2019 researchers at Chronicle, a security company owned by Google’s parent company, Alphabet, have examined the leaked tools , exfiltrated the past week on a Telegram channel, and confirmed that they are indeed the same ones used by the OilRig attackers. At this stage we might appreciate two communication ways.

article thumbnail

Hacking The Hacker. Stopping a big botnet targeting USA, Canada and Italy

Security Affairs

My entire “Cyber adventure” began with a simple email within a.ZIP file named “Nuovo Documento1.zip” Stage1 was dropping and executing a brand new PE file named: rEOuvWkRP.exe (sha256: 92f59c431fbf79bf23cff65d0c4787d0b9e223493edc51a4bbd3c88a5b30b05c) using the bitsadmin.exe native Microsoft program.

article thumbnail

Why Does Production Have to be Such a Big Production?, Part Three

eDiscovery Daily

Shawn Huston of LSP Data Solutions ( www.lspdata.com ) recently told me that 2/3 of the load files he sees in productions have errors. Remember my previous comment about communication? Concordance load files typically use the file extension DAT and the þ¶þ characters as delimiters, e.g.: Concordance Load File.