Twitter, the DOJ, DarkSeoul, Fake Employees, PlugX, Stargazer Ghost, Aaran Leyland… – SWN #401
Twitter Opt-In, the DOJ, DarkSeoul, Fake Employees, PlugX, Stargazer Ghost, Aaran Leyland, and More on the Security Weekly News.
Doug White
- US offers $10M for tips on DPRK hacker linked to Maui ransomware attacks
- KnowBe4 Hires Fake North Korean IT Worker, Catches New Employee Planting Malware
- French police push PlugX malware self-destruct payload to clean PCs
- CrowdStrike CEO says 97% of Windows systems back online
- Tech firms top list of most targeted industry in Q2 by cybercriminals
- Crooks used 3K GitHub accounts to distribute malware
- Analysis
- How to Stop Elon Musk From Training His AI On Your Data
Aaran Leyland
- How a cheap barcode scanner helped fix CrowdStrike’d Windows PCs in a flash
Shortly after Australian branch of accounting and advisory firm Grant Thornton experienced a series of Blue Screens of Death (BSOD) on their Windows PCs and servers last Friday, senior systems engineer Rob Woltz recalled a critical detail: PCs treat barcode scanners the same as keyboards upon booting up.
The insight gained significance when the company had to deal with the chaos caused by CrowdStrike, which sent numerous PCs and at least 100 servers at Grant Thornton Australia into a problematic cycle due to CrowdStrike's flawed testing software.
Grant Thornton encrypted all their devices using Microsoft's BitLocker, necessitating a multi-step resolution from CrowdStrike and a 48-character key for rebooting.
