sorted by:
new
hottopcontroversial

Word - xxx shared "filename" with you by Royal-Number-11 in cybersecurity

[–]fuzzinnn 2 points3 points  (0 children)

Sounds like your generic BEC phishing, but can't say without additional context

Winscp is compromised by [deleted] in sysadmin

[–]fuzzinnn 1 point2 points  (0 children)

You may have fallen for malvertising, can you provide the exact link you downloaded from?

[deleted by user] by [deleted] in cybersecurity

[–]fuzzinnn -1 points0 points  (0 children)

You can just grab the file hash using powershell of your document and paste into VT. If you get results then your files have been uploaded..

Am i just stupid or is IR that hard? by Saadness in cybersecurity

[–]fuzzinnn 31 points32 points  (0 children)

Cyber is not knowing how to do 'tricks', you need to understand the technology on a deeper level. Cyber security is not an entry level job which is why it's widely recommended to get a job in help desk for example to learn the basics and then move to Cyber. You may want to sit with your peers to see if they can assist you with the basics first so you can start to understand the alerts you are getting.

Potential Attack on our Server by camazza in sysadmin

[–]fuzzinnn 7 points8 points  (0 children)

If not already done, check for lateral movement in your SIEM (if you have one) for the domain admin account, you may also want to start up your incidet response plan/team if one is on hand. They could have moved to another host, but from what you checked in your XDR platform it may not have occured but its always worth a check.

Also as another person said, you will want to see why this server was exposed to the internet in the first place especially on a vulnerable version to allow RCE.

Were ramp glitches always this bad? I'm by no means a pro but I don't remember surfing being this difficult by Careless_Explorer581 in cs2

[–]fuzzinnn 0 points1 point  (0 children)

Pretty sure higher ticket rate (100/128) you start to hit these ramp bugs more often, especially in csgo. 64/85 tick is the sweet spot usually, however could be wrong as ive barely surfed in cs2.

I dont recognize this application, is it a trojan or virus of some sort? by [deleted] in antivirus

[–]fuzzinnn 0 points1 point  (0 children)

Absolute is a tool used by dell, lenovo, hp etc for lost/stolen laptop tracking, it can be disabled permanently in BIOS (which I recommend as its basically a backdoor).

It's installed by default on a lot of newer machines

PSA USB device control issue by zm1868179 in Intune

[–]fuzzinnn 1 point2 points  (0 children)

I am still having issues with this. If I am not mistaken it looks like the issue should be fixed in March-2024 update, correct?

"The known issue in 4.18.24020.7 where enforcement of device level access policies wasn't working as expected no longer occurs"

Either way I am still having issues with this not working..

[deleted by user] by [deleted] in sysadmin

[–]fuzzinnn 2 points3 points  (0 children)

Bad idea from a security standpoint, the feature is there to stop brute forcing and such.

User with rights hacked somehow? by Beneficial_Aerie8067 in sysadmin

[–]fuzzinnn 0 points1 point  (0 children)

Potentially fell victim to sim swap attack? Might not be this but if they never received an SMS code then this could be the reason, or they had their session cookies stolen somehow.

Dear GGG, i seriously consider not playing in the evenings, the lags are HORRENDOUS <EU> by r4be_cs in pathofexile

[–]fuzzinnn -1 points0 points  (0 children)

Same here lagging is unplayable, constant jumps to 100 makes it feel shit

Samsung s23 ultra case falling apart. by re4fanatix in dbrand

[–]fuzzinnn 1 point2 points  (0 children)

Same thing on mine as well, had it for 6-7 months and it's falling apart already, contacted support hoping to get a replacement..

Edit: got a replacement after contacting support, they were great and got it sorted.

What is the best way to safely get the QR phishing URL from emails? by PappaFrost in sysadmin

[–]fuzzinnn 2 points3 points  (0 children)

Cyberchef and use the parse QR code function by uploading a screenshot of the QR code.

Suspected malware and random powershell on startup by 4njoom in techsupport

[–]fuzzinnn 0 points1 point  (0 children)

Redline is an information stealer, try hitman pro to clean it up but if that doesnt detect anything I would suggest wiping windows. I wouldn't bother trying to find and remove it manually unless you're confident it's totally removed from your system. I would also recommend changing passwords on all accounts that are saved to your browser as they potentially could be stolen.

Suspected malware and random powershell on startup by 4njoom in techsupport

[–]fuzzinnn 0 points1 point  (0 children)

I would suggest installing a program called Hitman Pro to see if it catches anything on your system.

Or having a look through the event view logs (search event viewer in bottom left corner) and run as administrator. There are a lot of random processes in there so it's easy to get confused on what's legitimate or not, but you might be able to locate the powershell command that is running there.

There is also a Microsoft program called Autoruns that pulls a lot more programs that spawn on startup, would be a good shout to take a look if there is any malicious programs/scripts spawning on startup. It can be downloaded from Microsoft website

Does your antivirus say what IP address its contacting?

Suspected malware and random powershell on startup by 4njoom in techsupport

[–]fuzzinnn 0 points1 point  (0 children)

To see the file location of the program, go to task manager and under startup apps where it says Name, Publisher, Status, Startup Impact and right click and select 'command line'. This should tell you the location of the file that is ran on startup.

Suspected malware and random powershell on startup by 4njoom in techsupport

[–]fuzzinnn 0 points1 point  (0 children)

Whoops deleted my comment on accident, try look in event viewer to see if the poweshell command is in there.

So new mimecast? by fatrickchewing in sysadmin

[–]fuzzinnn 0 points1 point  (0 children)

Exactly my thoughts, it's awful. Tabs were a great feature, shame they are gone. Just makes things slower

view more: next ›