Hello, welcome to the Monday, March 30th, 2020 edition of the Sandton and Storm Center's Stormcast.

My name is Johannes Ulrich.

And I'm recording from Jacksonville, Florida.

With COVID-19 absolutely dominating the news, there is, of course, tons and tons of scams that are going around in order to take

advantage of this situation. We have our domain classification project going. If you haven't seen

it yet, I think I talked about it on Friday's podcast. You can help out and classify some of the domains that contain keywords

like COVID-19 or Corona in order to figure out which ones of them are currently being

actively used. Also created a quick video with some of the initial results.

Had over the weekend quite a few users that were actively participating in this.

So thanks a lot for those who spend some time on this.

I think right now we have about 7,000 or so domains classified.

Still have to do a quick summary on this.

Last week, I talked about how Google is trying to make it more difficult to use a fake

USB device to act as a keyboard and enter malicious commands on Linux.

Well, interestingly, TrustFave analyzed some

malware that apparently did just that against Windows, trying to use a malicious USB device

to then inject keystrokes. Now, unlike with a simple fishing attack where the attacker just sends you an email, this

attack actually arrived as a physical letter and claimed to be a thank you gift from Best Buy.

Overall, I have to say it looked plausible.

There is a Best Buy gift card included. In order to use it, there is a USB stick

that claims to have items listed that you may order using that gift card. Now, as soon as you

enter the USB stick into your system, it will actually turn out to be a keyboard. And this keyboard will then type out a PowerShell command.

...