Wednesday, October 21, 2015

Trinity College host being used as C2 by credential stealing malware (157.252.245.49)

›
We notified Trinity College of the issue and have not gotten a response.
Tuesday, September 29, 2015

New Blog Location

›
Please update your blog location to our new blog .
Tuesday, September 8, 2015

Goodbye Bloggers

›
As many of you know we have been running this site in a volunteering capacity for awhile now. We have decided to shut down this blog and mov...
Thursday, August 27, 2015

CONFIRMED BREACHED: August Benefits Inc - Attack on SLC Security

›
The following host have been detected as being potentially breached based on data from SLC Security owned and operated sensors. We have deci...
Tuesday, August 25, 2015

Alert Posted

›
A new critical alert was posted for SLC Security clients in regards to a new unknown APT like activity that was detected by the SOC. This ac...
Friday, August 21, 2015

Why did Ashley Madison lie about the data breach initially and who was responsible for the fake torrents that appeared?

›
So it's been nothing short of an interesting week for Ashley Madison and the information that has come out of the breach. Initially we r...
Wednesday, August 12, 2015

US Government and Military Hacked by ISIS?

›
Absolutely. It's the same information I posted yesterday. See this article - Click Here Now we have seen information being leaked an...

BREACH: habbo.nl

›
The system at www.habbo.nl has been compromised and user information has since been posted to several forums. The information on this incide...

SLC Security HIDS Client

›
SLC Security Services has developed a HIDS client that works with the open source MISP system ( www.misp-project.org ). The platform was des...
Tuesday, August 11, 2015

Large Telecommunications Company Appears to have been Breached

›
SLC Security researchers have located information indicating that a large telecommunications company servicing Government clients has had a ...
Monday, August 10, 2015

Recent Attackers

›
Seems these attackers would like to be blocked on 400+ corporations networks. Domain,IP,Subnet,"MX Hostname","MX IP",D...
Sunday, August 9, 2015

OMB Credit Monitoring Failure

›
It has come to our attention that many of the affected individuals have not been able to sign up for credit monitoring. As part of the CSID ...
Wednesday, August 5, 2015

Are we tired of this already??? - A look at the notorious Inbound Fax Messages

›
As most of you already know the incoming fax messages that show up in your email are infected. Many admins already block the content (as do ...
Monday, August 3, 2015

AshleyMadison data appearing in the underground

›
Our researchers have started uncovering large amounts of information possibly from the AshleyMadison breach. We have identified several file...
Thursday, July 23, 2015

Potentially Breached Entities (From Sensor Data) - 7-23-2015 6:44PM EST

›
The following host have been detected as being potentially breached based on data from SLC Security owned and operated sensors. We have dec...
Tuesday, July 21, 2015

Potentially Breached Entities (From Sensor Data) - 7-21-2014 11:19PM EST

›
The following host have been detected as being potentially breached based on data from SLC Security owned and operated sensors. We have dec...
Wednesday, July 15, 2015

Potentially Breached Entities (From Sensor Data) - 7-15-2014 2:59 (M EST

›
The following host have been detected as being potentially breached based on data from SLC Security owned and operated sensors. We have dec...
Tuesday, July 14, 2015

BREACHED: University of Maryland Serving up CVE-2015-5119??? I sure hope not! - UPDATED

›
An analyst reported to us today that University of Maryland is serving up exploits from CVE-2015-5119. That's not good but we alerted to...

Potentially Breached Entities (From Sensor Data) - 7-14-2014 1:32 AM EST

›
The following host have been detected as being potentially breached based on data from SLC Security owned and operated sensors. We have dec...
Saturday, July 11, 2015

MISP Server Coming Online

›
With our ongoing integration of the "Jigsaw" IOC platform we wanted to let you know that we are in the process of standing up a pr...
Tuesday, July 7, 2015

Note: Hackedteam MD5 Hashes

›
There are over 500+ MD5 hashes that have been determined so far in regard to the hacker team (a.k.a Hacked Team) disclosure. We have posted ...
Monday, July 6, 2015

Caltech - What are you guys doing? - California State Polytechnic University - Pomona (CSPUP)

›
Looks like 134.71.81.34 is having some fun really trying to get into our shared resources without authorization. If you want an account do l...

Potentially Breached Entities (From Sensor Data) - 7-6-2014 2:20 AM EST

›
The following host have been detected as being potentially breached based on data from SLC Security owned and operated sensors. We have deci...
Sunday, July 5, 2015

Potentially Breached Entities (From Sensor Data) - 7-5-2014 3:11 AM EST

›
The following host have been detected as being potentially breached based on data from SLC Security owned and operated sensors. We have deci...
Saturday, July 4, 2015

Potentially Breached Entities (From Sensor Data) - 7-4-2014 2:21 AM EST

›
The following host have been detected as being potentially breached based on data from SLC Security owned and operated sensors. We have deci...
Wednesday, July 1, 2015

BREACH: Univ of Michigan 2nd Notification - UPDATED

›
Pay attention because we are seeing traffic from the Univ of Michigan as well as Horizon's Church in Michigan. They still appear to have...

BREACH: Holiday Inn Express Malvern

›
This location is breached and has been for awhile... Again don't say we didn't tell ya! Our threat intelligence data shows that they...

Harvard Breach - What did we see? - UPDATED

›
So it has been reported by news media this evening that Harvard has once again fallen to hackers. Security researcher and advocate databreac...
Monday, June 29, 2015

Botnet Russia (From Russia With Love) - 109.230.131.95

›
Very interesting port activity on this host as well. May want to look for traffic going to this one... While there appears to be a router on...

PHISHING: Healthcare Related - 86.104.134.156

›
Looking through recent traffic we noted some very interesting packet data going to 86.104.134.156. We have noted a large amount of healthcar...
Wednesday, June 24, 2015

Hey Harvard do you realize...

›
Hey Harvard to you realize your sending out millions of infected email messages. Dyre to be exact. Source Host:  140.247.39.51
Tuesday, June 23, 2015

Adobe Zero Day Exploit - One Issue After Another

›
Adobe Systems Inc . today released an emergency update to fix a dangerous security hole in its widely-installed  Flash Player  browser plug...

IMPORTANT NOTICE: If your a normal blog subscriber please read

›
If you would like to continue receiving information on this blog you will need to subscribe to the mailing list (it's free and to your r...

Threat Intelligence Platform is Live

›
For those of you that have shown an interest you will be receiving a trial of our threat intelligence search platform within the next few we...
Tuesday, June 9, 2015

BREACH: Element Vehicle Management Services

›
Seeing indications that this entity is breached. Information has been posted to the Internet and is already hitting some underground chat se...
Monday, June 8, 2015

BREACH: army.mil breached by Syrian Electronic Army

›
Reports have been coming in that the Syrian Electronic Army has breached (www.army.mil) and DOD has put out noticed to staff to not access t...
Thursday, June 4, 2015

BREACH: Shop T Wine

›
We noted usernames and passwords that could be confirmed being leaked today for the Shop T Wine website. The information first appeared in a...
Wednesday, May 27, 2015

Web Scanning Engine

›
SLC Security Services LLC has just launched a web scanning engine with capabilities to find similar registered domain names, blacklist check...
Tuesday, May 26, 2015

Disbelief, Legal Threats, Admissions of Guilt... What a week...

›
So it's been an interesting week at SLC Security. We have been doing many security notifications over the past few weeks and the number ...
Sunday, May 17, 2015

Info: 216.146.38.70 being used by malware to get current IP address

›
Malware MD5's associated with this dynamic DNS domain checkip.dyndns.com and checkip9.dyndns.com. May 11th 2015, 13:33:04.358 iocs-sl...
Thursday, May 14, 2015

BREACH: mSpy Breached

›
A company linked to mobile phone spy software has become the victim of hacking. See Kreb's report here .

SLC Security Targeted by Botnet

›
It goes without saying that the more information we put out there and the more we expose attackers the increase in likelihood that we will b...