Hello, welcome to the Monday, June 13th, 2016 edition of the Sandton and Storm Center's Stormcast.

My name is Johannes Ulrich, and today I'm recording from Washington, D.C., of course, here at Sandsfire.

Today on Monday evening, we will have our annual handlers panel, so if you want to meet some of our

handlers that's your chance we will also have a couple of vintage encryption devices

available including an original enigma system and gee today released version 2.0 of his DNS sinkhole like prior versions.

It's released as an ISO image so can either install it on a standalone machine or a virtual machine

should work pretty straightforward and this particular tool has come in really handy over the last

few years. It does implement a DNS server that you can then use to block malicious domains and

redirect them to listeners on that sinkhole system. So you not only detect if a host is infected you also disrupt command

and control connections and may learn a little bit more about those connections and last week

there was quite a bit of discussion in windows developer forums about a telemetry feature that was automatically compiled into

all software that you compiled with Microsoft's Visual C. Now, telemetry, of course, sounds like

calling home, but that's not really what this feature was about. It was really more about performance debugging off the software and adding hooks that allow you to log when certain libraries are loaded and the like.

But nevertheless, this wasn't a feature that developers had to enable.

It was enabled by default.

And there was no clean way to actually disable this

particular feature. Microsoft now came forward and offered ways how to disable the feature and the

feature should be disabled now by default in future releases of Visual C.

And the ESET software is reporting about the crisis ransomware being more and more used in the wild in order to yet again encrypt users' files.

Now, this particular piece of ransomware doesn't just encrypt.

It also does send several documents to the group behind this software.

So there's also a data exfiltration problem.

...