Hello, welcome to the Tuesday, August 17, 2021 edition of the Sands and its Storm Center's Stormcast. My name is Johannes Ulrich, and I'm recording from Stockheim, Germany.

I talked before about Malware Bazaar. That's the website that allows you to download Malva that other people contributed to

their repository, including in daily badges. And now the problem of course with these daily

badges is you get a ton of files and the day today has some tips on how to easier filter these batches with some simple YARA rules and sip dump.

So a great way to look at individual samples and filter them out, and of course, the DA is also

providing some sample YARA rules to get you started. An IOT Inspector company that's dealing with firmware analysis and looking for vulnerabilities in

firmware has taken a closer look at the RTL 8,000 series of systems on a chip.

You probably have heard of these systems before. They're very

commonly used to implement Wi-Fi functionality in particular in lighterweight devices like

home-based routers and such. And of course, IoT Inspector being a company looking for

vulnerabilities. Yes, they wrote a blog because they found

some in this particular type of chip set. The vulnerabilities were found in their software

development kit that is commonly used by vendors to implement their own custom software

for these chips.

And while, IOT Inspector identified about 65 different vendors that used this particular

chip set and as a result are now vulnerable to have their devices taking over remotely. IOT Inspector released plenty of details

about these vulnerabilities, so it shouldn't be all too difficult to develop exploits for it.

As an end user, of course, you need to wait for the vendor of the particular piece of equipment that you're using to release

and update. The IOT Inspector blog has a list of possibly vulnerable devices attached to it.

I doubt that the list is complete. It's mostly based on some scanning via Shodan and such that IOT inspector did.

Start TLS has always been sort of a little bit of an ugly workaround if you're trying to negotiate a

TLS connection on the fly, not necessarily knowing ahead of time whether or not a particular service supports TLS.

...