Hello and welcome to the Wednesday, September 16th, 2020 edition of the Sandsenet Storm Center's

Stormcast. My name is Johannes Ulrich, and then I'm recording from Jackstable, Florida.

Brad today posted another one of his Malware analysis quizzes in this case. He's asking what type of malware is being downloaded in the

PCAP that he offers for analysis. Now, he does recommend that you are not using a Windows

system to analyze this file because the malware is Windows malware. So if you aren't careful enough, it's possible

that you could infect yourself if you are extracting the malware. I won't give away the solution

yet, and please don't read the comments if you are in for the challenge. Other interesting

comment that Brad makes about this malware,

it only takes two clicks in a default configured Windows 10 system,

and Windows 10 in its default configuration will not alert you of this particular malware,

which, well, that's sort of a good part,

has become somewhat uncommon. Most common malware is now being detected by Windows 10 in its

default configuration, so you don't necessarily need any specific antivirus or any heartening of the system.

And I've mentioned Adobe's Magento a couple times in the past because it has been repeatedly

a target of attacks. One particular problem is Magento 1. Now Magento 1 has been end of life for I think a couple

years now but still isn't heavy use and of course being end of life. There are no more

patches being released for it and as such of course it's pretty easy pickings for attacker.

Security company Sandsk has an update on an attack that they detected last weekend.

Apparently around 2,000 different online shops were the victim of these attacks, and as a result, a keystroke

logger was installed. So of one of those typical JavaScript keystroke loggers that we see a lot

these days. Now, part of the reason of this apparent flare-up in attacks against Magento 1 appears to be a hacking kit being sold by some individuals. For $5,000, you'll get a remote code execution exploit, including an instruction video. And apparently, it does not require any prior Magento admin experience.

And talking about Adobe, Adobe today released an update for Media Encoder.

...