Friday, October 31, 2014

EXCLUSIVE - The Malware Hitlist

›
The following list is a historical look at Backoff and similar malware over the past few months. Many Retailers have been affected by this m...

NOTIFICATIONS: Pending Patient Notifications

›
SLC Security Services LLC will begin notifying patients of Cape Fear Valley Health System (Fayetteville, NC) and WakeMed (Various Locations)...

BREACH: Freeborn County Sherriff's Office

›
Freeborn County administration is investigating a suspected data breach within law enforcement, according to Administrator John Kluever. ...

BREACH: Watsons Bay Hotel (watsonsbayhotel.com.au)

›
The host at watsonsbayhotel.com.au is compromised and is serving up malware. The IP and Domain have been added to our block list.
Wednesday, October 29, 2014

Peerblock updates and signature updates

›
Clients and Lab users. We have updated our signatures, MD5 hashes, IP and network information. Customers we have already pushed the MD5 and ...

OPINION: PCI-DSS Pretty Much Useless...

›
Quote: Merchants must meet more than 400 requirements, like installing firewalls, updating antivirus software, and ensuring that credit c...

Today's Naughty List - 28 Oct 2014

›
  89.248.169.94   Netherlands (NLD)   n/a n/a     208.105.81.202   United States (USA)   New York New York ...

SLC Security Auditing Framework Community Edition

›
SLC Security Services LLC announced today that we will be releasing our auditing framework as freeware. The free version of the software wil...

Patient Disclosure Monitoring - 28 Oct 2014

›

Webex Trollers on the Prowl

›
We have been asked by a company to determine who has been dialing into their Webex. The Webex session showed a phone number but the person o...

The Learning Series: Lesson 1 Access Control List - Be specific, Be precise!

›
As many of you know this blog is staffed by volunteers and various individuals that have experience in computer forensics, network forensics...

Peerblock Update

›
We have once again rolled out a huge update to our peerblock list. It's probably a good time to force your peerblock to force an update ...

BREACH: Hackers breach some White House computers

›
Hackers thought to be working for the Russian government breached the unclassified White House computer networks in recent weeks, sources ...

NEWS: AZ State Retirment System Responds To Potential Data Breach via OSINT-X Newswires

›
The Arizona State Retirement System is responding to a potential data breach affecting almost 44,000 members. Officials believe some sensi...

NEWS: NSA Chief Warns Companies Against Revenge Hacking via OSINT-X Newswires

›
Businesses, under siege from hackers looking to steal sensitive information, increasingly want to take matters into their own hands. But t...

Some MD5's to catch some nastiness - Enjoy

›
191a02952905cc0037753700636c3339 e8045d8c9851b509a7bd25c9969cded2 37e3ec6c9569bd7035b440c24af108fd e543385928ffdde91a5f78c1ac8a99dd dc5bf1fc...
Tuesday, October 28, 2014

NEWS: Cyberattacks Point to Russia via OSINT-X Newswires

›
We agree Fireeye! Earlier this year, investigators for Silicon Valley security company FireEye Inc. visited a U.S. firm to deter...

BREACH: ASRS 44000 retirees affected

›
Nearly 44,000 state retirees may have had their personal data compromised in a security breach, and the Arizona State Retirement System is...

Noisy Much?

›
 kevin 109.190.158.183 smtp 2014-10-27 16:42:51  kevin 109.190.158.183 system 2014-10-27 16:41:37  kevin 109....
Monday, October 27, 2014

Malware Hit List - It's coming this week - Updated

›
This week Vulnerable Disclosures will be releasing a list of companies, individuals and firms affected by hard to detect malware including n...
Sunday, October 26, 2014

BREACH: Delaware River and Bay Authority

›
The Delaware River and Bay Authority is warning customers of a possible data breach on board the Cape May-Lewes Ferry. The Authority says...

Shellshock via email? You bet'cha - UPDATED

›
Starting yesterday we began seeing some known spam host trying to execute code via specially crafted email messages. We believe SANS also is...
Saturday, October 25, 2014

Backoff Malware and Variants are Spreading through POS Systems Quickly

›
We have had several retailers notify us that they are having problems keeping the Backoff variant off their point of sales systems. We have ...

BREACH: Qutar Petrolium Hacked

›
Qutar Petrolium appears to be owned at this time. What is interesting is that we started seeing malicious activity the past few days and the...

Second Breach Kinston, NC Government

›
70 Lenoir County employees information has been published in a salary report. An employee failed to remove the information that included nam...

RESEARCH: Cloud Providers Ignoring Malware Laden Host

›
During our recent research we have been seeing an uptick in the number of cloud hosting providers that are hosting malware and malicious con...

DISCLOSURE: YourTel America USD

›
Via FCC Disclosed a public release of customer information. Type: Retail Area: Cell Provider First Noted: 24 October 2014 1:25AM ES...

DISCLOSURE: TerraCom Inc.

›
Via FCC Disclosed a public release of customer information. Type: Retail Area: Cell Provider First Noted: 24 October 2014 1:25AM ES...

Reeves International Inc Hacked (www.breyerhorses.com)

›
Reeves International Inc. is informing customers of a data breach of one of their online retail sites called Breyer Horses . On September 9...
Friday, October 24, 2014

Today's Peerblock Update

›
If you are updating your peerblock from our servers you may wanna force an update today. This will protect you from several nasty malware va...

NEWS: SLC Security Services certified as an Electronic Countermeasures School

›
(Raleigh, NC) - Earlier this week SLC Security Services LLC's founder and CEO Kevin Wetzel was granted approval by the North Carolina Pr...

NEWS: Hackers Threatening Judge in Silk Road Case

›
We are getting reports and mainstream news has started reporting that hackers are targeting judge Katherine Forest whom is set to oversea th...
Wednesday, October 22, 2014

ALERT: Organized Chinese Hacking Attacks NET 117.25.130.0/24

›
We highly recommend you block the netblock listed above. We have seen a serious rise in the number of reports of hacking from this IP space....

ABUSE: CARI.NET (www.cari.net) Complaints

›
We started fielding complaints this morning from cari.net in California. Our clients are reporting brute force attacks from this entity. C...

Today's Naughty List - 22 Oct 2014

›
120.113.70.54   Taiwan (TWN)   T'ai-pei Taipei 111.93.244.98   India (IND)   n/a n/a 124.81....

NEWS: Don't say we didn't warn you about this one

›
Security researchers have been talking behind the scenes with Microsoft concerning the recent patching efforts on CVE-2014-4114. Apparently ...
Tuesday, October 21, 2014

Wow - Still think your phone and faxes are secure?

›
I was coming back from the store today and guess what I observed? You can tell from the picture that our local phone com...

Today's Naughty List - Increased Activity 21 oct 2014

›
201.205.250.2   Costa Rica (CRI)   n/a n/a     110.136.246.195   Indonesia (IDN)   n/a n/a     ...

BREACH: POINT360 Hacked (point360.com)

›
We received information and have logs tonight confirming that POINT360.COM has been hacked. The company located at 2701 Media Center Dr. Los...

WARNING: Fraudulant Phone Charges, Hacking, FCC & FBI turning a blind eye

›
As an investigator I have seen many cases come and go. One in particular was a case involving a fraud of a foreigner that had sent money to ...

NEWS: Russians Ruled out by officials on JP Morgan Chase Hack - Conflicting releases by Chase on this one

›
Pay close attention to news stories such as this one: Reuters Article They are being very careful not to accuse Russia of state sponsore...
Monday, October 20, 2014

BREACH: Healthcare entity has fallen victim

›
We received word today that a health care entity is investigating an internal breach of their systems. This is a medical breach and is tied ...

POTENTIAL BREACH - STAPLES investigating potential data breach via OSINT-X

›
Word has come in that Staples is investigating a potential data breach. News is spotty but they are stating that it appears to be confined t...

Patient Disclosure Monitoring - 20 Oct 2014

›

Today's Naughty List - 20 Oct 2014

›
  162.219.179.101   Canada (CAN)   n/a n/a     139.0.4.177   Indonesia (IDN)   Jakarta Raya Jakarta   ...