Hello, welcome to the Friday, July 14th, 2017 edition of the Sandsenheim and the Storm Center's Stormcast.

My name is Johannes Ulrich.

And I am recording from Berlin, Germany.

At hackers, of course, do not write all malware from scratch instead.

Malware often uses legitimate components, which of course can cause confusion when

you're carelessly assembling indicators of compromise.

Now Malverbytes has a blog post about just such a case.

In this particular case, the Malver is downloading FFMPEC.

FFMPEC is a video library, a set of video conversion

tools and the like that is often used by open source video software and in itself

not at all malicious, but this particular malware is downloading FFMP pack in order to be able to record video using

the systems build-in camera and of course incorporate that in its spyware features.

In itself, the malware is not really all that remarkable.

It's your usual JavaScript file that then downloads additional components

should be spotted pretty easily by various anti-malware tools. Of course, I hope they will not

add FFMPEC as a signature to their tools. Password wallets, of course, are a must-have these days, and there are a number of competing

offerings out there that pretty much offer sort of the same service where they will store

your passwords in an encrypted wallet on your system.

Now, all of these password wallets pretty much also offer the ability to

sync password wallets between different devices. And of course, that's also an important feature

these days where you no longer really just have one system that you use to access, for example,

your online banking or other important accounts from.

...