Hello, welcome to the Thursday, January 12th, 2017 edition of the Sandsenet Storm Center's Stormcast.

My name is Johannes Orich, and today I'm recording from Jacksonville, Florida.

Pratt today explains what's behind some of the fake parking ticket notifications that you may have seen in your inbox.

Now, most people probably won't click on it,

but then again, hackers use these emails because they know there will be people that click on it.

And, well, what happens if you click on it, a downloader is installed after you enable the macro

in the Word document that's included with the email, that downloader will

then install the Wattrak backdoor. This is sort of more traditional backdoor. It's not

crypto ransomware. Of course, that could always come later. It gives NetHacker control over your system.

It does lower security settings, in particular in an explorer, disables your anti-matter

and also steals information from your system like passwords.

As usual, Pratt is sharing all the indicators of compromise, including full packet captures.

So take a look and go hunting and see if you find any copies of this that a user clicked on in your environment.

Personally, I find that anti-spam does a reasonable good job in getting rid of a lot of these emails.

But then again, there are always some slipping through. And one thread that you really shouldn't disregard is people

checking personal email accounts from work, like webmail accounts. And then of course,

they bypass a lot of the protections that you put into your mail servers with anti-spam and anti-malware.

And when I'm talking about SSL and how to configure it correctly, usually I remind people that

while you should not enable things like SL version 3, probably a much larger risk is certificate

authorities not appropriately checking who is actually

asking for the certificate. And we had yet another case this time it's GoDaddy. GoDaddy had to

revoke over 6,000 certificates, or at least they're saying over 6,100 customers were affected by this because due

...