Bad Rabbit: the fake Flash ransomware that hit Kyiv in 2017
On Oct 24, 2017, Bad Rabbit used a fake Flash installer to hit a metro, an airport and media in Ukraine and Russia. How …
Incident Response 38 posts
Information security in plain English: scams, hardening and privacy — plus retrogaming, games and geek culture.
Password Spraying: What It Is and How to Detect the Attack
Password spraying tries a few common passwords against thousands of accounts and slips past lockouts. How it works, how …
Infostealer: what it is and how to tell if you're infected
An infostealer steals saved passwords, session cookies and crypto wallets from your browser. See how it spreads, the …
What Is SQL Injection? How It Works and How to Prevent It
SQL injection still takes down whole companies. See how the attack works with a simple example, real cases like …
Hacked Instagram account: what to do in the first 30 minutes
Instagram hacked? Learn the warning signs, what to do in the first 30 minutes, how to recover the account and lock it …
Conficker: The Worm That Exploited Windows Flaw MS08-067
On Oct 23, 2008 Microsoft shipped an out-of-band patch, MS08-067. Conficker used that flaw on millions of PCs. Here's …
WhatsApp cloned: 6 signs and what to do in the first minutes
Lost access or contacts getting Pix money requests? Learn 6 signs of a cloned WhatsApp, how to recover the account and …
Adobe Breach 2013: 153 Million Passwords and a Crypto Blunder
On Oct 3, 2013 Adobe admitted a breach. The dump held 153 million accounts with 3DES-ECB passwords and plaintext hints. …
Target 2013: the theft of 40 million cards via an HVAC vendor
In 2013, attackers breached Target through an HVAC contractor and stole 40 million cards — the attack that redefined …
Yahoo breach 2013: the biggest leak in history, explained
In 2013, hackers compromised all 3 billion Yahoo users. The company only found out years later. How the biggest breach …