Hello, welcome to the Friday, March 11, 2020 edition of the Sansonet Storm Center's Stormcast. My name is Johannes Ulrich, and I'm recording from London, England. Didn't I tell you not to upload documents to Virus Total that you don't mind essentially becoming public. Well, Xavier took a look at

VirusTotal and found a number of documents within VirusTotel's database that do contain credentials.

Others of little interesting outcome here is also some of the credentials that he found are obviously from Turkey, and with that your top 10 passwords are also somewhat different in what you see in other top 10 passwords lists.

For example, you see things like Turkish soccer teams in the top 10 and other specific vocabulary.

There's also something to keep in mind for pen testers that in particular, if you are testing

a site that's not English, the standard password lists that are often published, focus more

on English speakers, and may not work as well for

these other non-English sites. And Finnish authorities are reporting about issues with

GPS along the Finnish-Russian border. This has happened in the past during Russian military exercises in the area, but apparently

this time no respective notice was issued in order to alert aviation of these problems.

Now, planes for the most part can fly just fine without GPS, but apparently there is a smaller airport

in Savalina in Finland, close to the Russian border, that had to stop service because for

that airport, no alternative ways are possible for navigation. GPS issues, of course, can also affect IT, in particular if you are relying for GPS for

time synchronization. Typically, the differences that are caused by this kind of jamming are

not significant enough to really sort of cause any significant issues here, but if you're

concerned about this, you may need to consider using an internal time standard.

Now, given the sanctions against Russia, the Russian websites are having a hard time renewing

some of the TLS certificates that they obtained from commercial

certificate authorities because, well, they don't really have a good way to pay for these

certificates. In response, Russia now proposed setting up its own certificate authority and already

has a website set up and some websites have already started using

that internal certificate authority.

...