Hello, welcome to the Thursday, July 27th, 2017 edition of the Santonet Storm Center's Stormcast.

My name is Johannes Ulrich, and the day I'm recording from Washington, D.C.

Brad wrote a diary describing a recent version of the Emotette malware.

Now, this malware as so often arrives as a VIRT document.

What was really great about this particular diary was that we got quite a bit of feedback from

our readers. Brad in particular when he wrote up the diary, didn't have an actual copy of an email spreading this

malicious document and now we had a number of readers provide us with emails essentially these are all

fake invoices bills we got one reader who received them claiming to come from AT&T, another one had a very similar email,

but the sender claimed to be Virgin Media.

When Apple released its latest patch set last week, I mentioned that one of the high-profile bugs being addressed here is a vulnerability

in the prodcom wireless firmer.

Well, it turns out that we now have the expected details for this particular vulnerability.

Exodus Intelligence did publish a blog with a lot of details how this particular

vulnerability works and how it can be exploited. Excess Intelligence also claims that they have

written already a worm that can be spread using this vulnerability from device to device.

Now the vulnerability is a classic buffer overflow in how Wi-Fi multimedia or wireless multimedia frames are being parsed.

The software only allocates 44 bytes for this information,

but NetHacker may encode up to 255 bytes here. Very similar to vulnerability in these drivers

with the SSID, where also there was an assumed maximum length for the SSID, but NetHacker essentially could send non-standard frames that exceeded this size.

Exploitation is not trivial but not terribly hard either, and again the blog that was published does include a lot of details in how to write an exploit for this vulnerability.

So if you haven't already done so, patch your mobile devices.

This is most likely going to affect mobile devices like cell phones, but there may also be some laptops, tablets and the like that are

...