Japan Earthquake: Possible scams / malware

Published: 2011-03-11
Last Updated: 2011-03-11 22:48:32 UTC
by Guy Bruneau (Version: 2)
4 comment(s)

There will probably be some emails scams and malware circulating regarding the recent Japanese earthquake that occurred overnight. If you receive such emails, could you provide samples using our contact form?

Be aware off

Fraudulent Organizations: If possible, donate to organizations you know and trust, not to new organizations just set up for this particular event. The IRS maintains a list of tax exempt charitable organizations [1]. This list is not 100% up to date, and it takes a while for a new organization to be added. But it can serve as a first sanity check.

Malware: Malware may be advertised as a video report of the event or come under other pretenses.

Update 1: Reports are already showing Fake AV exploiting the Japanese earthquake. Some of the sites to watch for are listed here. Other reports have been added as comments.

-----------

Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu

Keywords: Earthquake Japan
4 comment(s)

Snort IDS Sensor with Sguil Framework ISO

Published: 2011-03-11
Last Updated: 2011-03-11 16:34:27 UTC
by Guy Bruneau (Version: 1)
3 comment(s)

I have just released an updated CD of a hardened OS that includes Snort IDS sensor (version 2.9.0.4) with all the Sguil components ready to use. It is available in two versions, 32-bit and 64-bit. The CD has 3 options: sensor only, database only or all components on the same system.

The CD includes some new tools and updated scripts. The install.pdf document on how to install and configure the system is located in the rel_note directory.

Checksum for 32-bit available here and 64-bit available here.

-----------

Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu

3 comment(s)

Comments

cwqwqwq
eweew<a href="https://www.seocheckin.com/edu-sites-list/">mashood</a>
WQwqwqwq[url=https://www.seocheckin.com/edu-sites-list/]mashood[/url]
dwqqqwqwq mashood
[https://isc.sans.edu/diary.html](https://isc.sans.edu/diary.html)
[https://isc.sans.edu/diary.html | https://isc.sans.edu/diary.html]
What's this all about ..?
password reveal .
<a hreaf="https://technolytical.com/">the social network</a> is described as follows because they respect your privacy and keep your data secure:

<a hreaf="https://technolytical.com/">the social network</a> is described as follows because they respect your privacy and keep your data secure. The social networks are not interested in collecting data about you. They don't care about what you're doing, or what you like. They don't want to know who you talk to, or where you go.

<a hreaf="https://technolytical.com/">the social network</a> is not interested in collecting data about you. They don't care about what you're doing, or what you like. They don't want to know who you talk to, or where you go. The social networks only collect the minimum amount of information required for the service that they provide. Your personal information is kept private, and is never shared with other companies without your permission
https://thehomestore.com.pk/

Diary Archives