DLA Piper Privacy Matters

MARCH 20, 2023

As a reminder, in 2022, the CNIL priority topics were (i) direct marketing (ii) monitoring telework and (iii) the use of cloud computing (see our previous post ). Given the sensitiveness of such file, the related processing activities represent a high risk for data subjects. management of data subjects’ rights).

Computer and Electronics 52

Computer and Electronics IT File names Access 52

Security Affairs

NOVEMBER 16, 2018

Marco Ramilli, founder and CEO at cyber security firm Yoroi has explained how to use Microsoft Powerpoint as Malware Dropper. The downloaded file (wraeop.sct) represents a Javascript code reporting the Stage 2 of the infection process. Nowadays Microsoft office documents are often used to propagate Malware acting like dynamic droppers.

Computer and Electronics 106

Computer and Electronics File names Security IT 106

Security Affairs

AUGUST 20, 2018

As usually, I am not going to show you who was able to detect it compared to the one who wasn’t, since I won’t ending on wrong a declaration such as (for example): “Marco said that X is better than Y” Anyway, having the hash file I believe it would be enough to search for such information.

Computer and Electronics 71

Computer and Electronics Encryption Security File names 71

Security Affairs

MAY 3, 2020

Based on the magic file bytes this graph would track the percentages of file types that Malware used as carrier. In other words, it could be nice to see what are the patterns used by malware in both: domain names, file names and process names. TOP domains, TOP processes and TOP File Names.

Computer and Electronics 99

Computer and Electronics File names Cybersecurity IT 99

Security Affairs

MAY 2, 2019

Indeed we might observe a File-based command and control (a quite unusual solution) structure, a VBS launcher, a PowerShell Payload and a covert channel over DNS engine. The package comes with a README file having as a name “Read me.txt” (note the space). But let’s move on and start a quick analysis on it. The Glimpse Project.

Computer and Electronics 93

Computer and Electronics Communications Government File names 93

Security Affairs

AUGUST 31, 2018

Since blogging is not my business, I do write on my personal blog to share knowledge on Cyber Security, I will describe some of the main steps that took me to own the attacker infrastructure. My entire “Cyber adventure” began with a simple email within a.ZIP file named “Nuovo Documento1.zip”

Computer and Electronics 63

Computer and Electronics File names Security Access 63