Hello, welcome to the Monday, June 5th, 2017 edition of the Sands and at Storm Center's Stormcast.

My name is Johannes Ulrich, and I'm recording from Jacksonville, Florida.

Fishing has long been used to capture a variety of different credentials and financial credentials, of course, like bank accounts accounts have always been at the top of

the list now with Bitcoin becoming more valuable fishing scams that are now going after

credentials for Bitcoin exchanges and Bitcoin wallets themselves of course are becoming more

popular. A Bitcoin wallet is really nothing more than a

key pair, the secret key that you keep on your own system. Sometimes you deposit it with a Bitcoin

exchange to make it easier to trade Bitcoins and then the public key, essentially the address

that people use to send you Bitcoin.

In the case of a Bitcoin exchange account, all that is often required in order to gain access

to this Bitcoin wallet is a username and a password. Xavier wrote up one recent incident. He documented

a phishing attempt against users of blockchain,

one of the larger and more established Bitcoin companies that hosts users' Bitcoin wallets.

Blockchain does offer two-factor and SMS-based authentication as an option, but apparently doesn't require it.

Now Xavier also found part of the code used by the attacker on the affected website was used as a fishing page.

As so often the website was compromised and the fishing site was then added to an existing website

in a sub-directory. The email address receiving harvested credentials was still present on the server,

but most of the remainder of that fishing kit had been removed by the time Xavier looked at it. One common technique to inspect a possibly

malicious link is to hover over it. Usually you'll see the actual URL the link refers to and you're

easier than able to figure out whether this link is actually malicious.

In PowerPoint, however, links may still trigger macro execution if a user just hovers over a link.

This has recently been exploited in some malicious PowerPoint files, according to several

...