The Home Depot and Target Data Breach have a lot of similarities. Stolen vendor credentials, POS malware, etc. This article caught my attention today. It appears Home Depot Senior Executives are migrating from Windows to Macs. Historically, Macs have been not as targeted as Windows. With more Macs in the workplace, we are seeing more and more malware targeting Mac users. With Wirelurker and Masque Attack, iOS and Mac OS X are clearly targets. As more and more Macs are becoming common in the workplace, they will be targeted even more. 158 new pieces of malware are created every minute, or 158 new ways you are now vulnerable! Regardless, replacing hardware alone does not equate to security.
Continue reading...
After catching up on my RSS feeds this morning, there are a few articles that I thought I would share.
- 2014 Forensic 4 Cast Awards: Have you submitted your nomination?
- The Volatility team has a good blog post up regarding POS (Point of Sale) Malware that was allegedly used in the Target data breach.
- Master Linux forensicator and SANS Instructor Hal Pomeranz has started a GitHub with his perl scripts that he uses in forensic examinations.
- @jackcr's Handler Diaries Blog: Keeping Focus During An Incident is a good read for the incident responder.
- Unless you have been living under a rock, you probably follow Harlan's Windows IR blog and Corey's Journey Into IR blog. Both are superb resources for the forensic examiner and incident responder.
- David Cowen's HECF Blog is updated daily. Every Friday, David and his team host the Forensic Lunch. This past week's show featured Sarah Edwards and Craig Ball. Sarah discussed her upcoming Mac Forensics course with SANS. I've met Sarah and have heard her speak. Being a Mac forensicator, I am looking forward to this course. Craig Ball, Esq. discussed his role in being a Special Master in civil courts and brought an excellent perspective of digital forensics in the American court system. If you are a forensic examiner, make sure you watch his segment on the Forensic Lunch.
- Shellbag Forensics by Dan Pullega shared his research to his blog last month and is continuously updating it. Dan's research is being updated regularly (01.14.2014). Dan has done some groundbreaking research and if you are looking for someone to nominate for the 2014 Forensic 4cast Awards, this would be someone you should consider.
- Finally this Sophos article also caught my attention, Anonymous Yelp reviewers must be outed, US Court rules. This article points out,"...that anonymous users aren't covered by First Amendment protection of free speech if a review is "based on a false statement"...". As a society and with the evolution of technology, people have generally become desensitized. Don't say something online that you would not say or feel comfortable saying in person. So remember, spreading false information does not carry First Amendment protection of in itself. If you are interested in reading excellent articles and case studies on cyber crime and cyber conflicts I would recommend Susan Brenner's Cyb3rCrim3 blog. Another great legal resource is Benjamin Wright's blog at http://hack-igations.blogspot.com