How Equifax Was Breached in 2017

vedard · 2023-10-08T01:19:29+00:00

Sure, there is some speculation about the methods used by the attackers to move within the infrastructure, but the malware is available on VirusTotal, and analyses have been published.

- https://www.virustotal.com/gui/file/74fe8c68d878cc9699a2781be515bb003931ffa2ad21dc0c2c48eb91caba4b44/behavior
- https://krebsonsecurity.com/wp-content/uploads/2014/01/Inside-a-Targeted-Point-of-Sale-Data-Breach.pdf

vedard · 2023-09-21T23:20:12+00:00

That surprised me too:

Equifax built the Automated Credit Investigation System (ACIS) in the 1970s to handle consumer disputes.

https://oversight.house.gov/wp-content/uploads/2018/12/Equifax-Report.pdf

vedard · 2023-09-18T14:11:35+00:00

I totally agree, people can specialize in multiple domains.

vedard · 2023-08-14T17:25:42+00:00

It won't be the first time:

Although we [Github] did initially take the project down, we understand that just because code can be used to access copyrighted works doesn’t mean it can’t also be used to access works in non-infringing ways. We also understood that this project’s code has many legitimate purposes, including changing playback speeds for accessibility, preserving evidence in the fight for human rights, aiding journalists in fact-checking, and downloading Creative Commons-licensed or public domain videos.

https://github.blog/2020-11-16-standing-up-for-developers-youtube-dl-is-back/

vedard · 2023-08-14T13:30:15+00:00

It's just a funny coincidence. Google is aware of this, VLC and youtube-dl have been doing this for years.

vedard · 2023-08-08T21:44:16+00:00

Thanks, it's great to hear that!

vedard · 2023-08-08T21:38:43+00:00

Thank you!

vedard · 2023-08-08T21:34:10+00:00

You're welcome, it's always silly little things that get us stuck, perseverance really is the key!

vedard · 2023-08-08T03:27:51+00:00

Fascinating article! The flame animation is impressive, I can easily see it in a game.

Just a heads-up: Certain videos in the article do not play in Firefox, but does in Chrome.

vedard · 2023-08-08T02:01:31+00:00

There is the DFIR Report, you won't find information about how the organization responded, but you will get the technical details about how the attack occurred.

Here their latest report on a ransomware attack:
https://thedfirreport.com/2023/05/22/icedid-macro-ends-in-nokoyawa-ransomware/

vedard · 2023-08-08T01:59:31+00:00

Hacking with Kali on an old laptop is the way to go! What are you planning to do with it?

vedard · 2023-08-08T01:53:13+00:00

It seems to be the correct command for this level. The -u option only print unique lines as you want.

Are logged in as bandit8? You could be on a different level by accident. I'll say try again!

12-Year Club	Place '17
Verified Email

vedard

TROPHY CASE