Hello and welcome to the Monday, May 12, 2025 edition of the Sands and at Storm Sunners Stormcast.

My name is Johannes Ulrich and the time recording from Jacksonville, Florida.

This weekend, DDI posted the solution for last week's Stegonography Challenge.

This example used the similar encoding

as Didi presented in his past steganography diary, but with an interesting twist. Instead of

encoding the pixels in their normal order, meaning one line at a time of the image after another. Well, this one meant actually

vertical. So it did encode the data in the rows first and, well, then went over to the next

row. So in order to decode the data, you had to transpose it. And, well, imagine that

a D.D has a tool to transpose the data

for you and decode the image. For details, as usual, see DDA's diary.

And last week, the FBI published a press release that it is observing criminals using

compromised routers as proxies to build

infrastructure for criminal networks. Now, this is nothing fundamentally new, but in particular

they point out that the compromise of end-of-life devices is contributing to this, and of course,

those devices you can update one botnet identified

in this attack is the moon botnet a botnet we have first written about in february of 2014

these router botnets have been very persistent and as I've pointed out multiple times before,

well, they keep mutating and they keep adding new vulnerabilities to their arsenal.

Remember to track the end-of-life date of your network parameter devices and add monthly

firmware update, check to your calendar for home device in particular

but may not even be a bad idea for some business particular small business devices to have

some setup where you're being reminded hey let me double check that particular router if

...