Brandon Khuu

The drone assassination of Iranian general Qasem Soleimani is leading many to believe Iran is going to strike back with a significant cyber attack. Make sure your devices are fully patched with the latest security updates. It only takes a minute

all locks, then defenders should know about the key so they can protect themselves from it. A problem with this approach is that not everyone takes advantage of the opportunity. This leaves ppl open to attack by unskilled criminals and results in real costs to tax payers

Solid points. OST = tools used by both legit security folks and the bad guys CNO = legit IT security doing their jobs Security tools (for offense and defense) are often developed and released to the public. The thought behind the status quo is if attackers have a key to (1/2)https://twitter.com/QW5kcmV3/status/1206727979948298240 …

Got new internet today from Comcast. Funny how the temp PSK I set on the modem allowed their TV box to locate and authenticate to my network as soon as the tech plugged it in... PW changes, devices resets and bridging the modem to my Netgear router worked. #cybersecurity

"Cybersecurity breaches caused by employee error are very common, to the point that employee mistakes are an even larger threat to data security than hackers" Truth. And threats to data security often result in financial losses, decreased productivity, and hurt your reputation.https://twitter.com/RedSeal_co/status/1199752262203170817 …

Part seven: If you're responsible for securing your organization, Stage one accounts may have been infected with FAREIT malware, emails coming from those accounts have links to spoofed pages which are used to capture creds, and the stage two accounts are used for the BEC attack.

Part six: Having one or more foothold in your organization can allow the attacker to make requests and then confirm the legitimacy with another account. Attacks like this can be difficult to identify. Especially if you personally know the person who owns the account.

Part five: Be aware that these compromised accounts are being used to send additional phishing emails or to make requests such as wire transfers from internal employees

Part four: If you see a rule that you didn't setup then check to see what it's doing. Attackers are setting them up to hide emails related to their activity on YOUR account

Part three: If you start receiving phone calls or emails from friends and colleagues about an email that they think you sent and you didn't send it, change your password immediately. One way you can confirm that your account has been owned is by checking your inbox rules

Part two: A few of the phishing emails identified so far in the attack have had the following subject lines - "Proposal from [company name]" - "Proposal from [contractor name]" - "Review"

Thanksgiving advisory part one: Be careful of phishing emails from clients, suppliers, and other business partners as we go into this Thanksgiving weekend. There's a fairly widespread phishing campaign that's ongoing and targeting businesses of various sizes.