Cyber Threat Intelligence & Cyber Security Alerts Pakistan

February 2, 2017

Microsoft Power Point 2016, Java Code Execution

If the user have JAVA (or python or similar interpreters) an attacker can insert jar file or py file into the presentation and trigger it when mouse moves, for easier exploitation the attacker can use ppsx file which will load automatically in presentation mode and once the user opens the file and moves mouse it will trigger the payload.

January 29, 2017

Pakistan Cyber Security:Pak Army proposes new network along CPEC

Pakistan Army has proposed a new alternative network along the China-Pakistan Economic Corridor (CPEC) route for secured flow of the internet traffic as the current framework involve Indian companies posing security risk.

January 27, 2017

New malware-campaign: Chrome displays a message “font not found” to its users

Experts of the company Proofpoint warn users of Windows and Chrome browser: hackers have come up with a new trick and now disguise their attacks under load additional font package. The researchers write that attackers […]

January 27, 2017

Cybercriminal Gang Using Google Services for Malware Operations

If the file is executed, Carbanak’s VBScript malware will see itself triggered. From here, the malware then proceeds to send and receive commands “to and from” Google services such as Google Apps Script, Google Sheets and Google Forms services.

January 25, 2017

IT Companies move to target ‘terrorist content’ online

The move by the technology companies, which is expected to begin in early 2017, aims to assuage government concerns and derail proposed new federal legislation over social media content that is seen as increasingly driving ‘recruitment’ and ‘radicalization’, while also balancing free speech issues.In Pakistan , people can use Surf Safe Pakistan web portal to report terrorist and extremist content online.

January 25, 2017

NTISB: Cyber security alert issued in Pakistan

Government officials warned that the emails being sent from Mumbai, (India) and USA addresses could hack all the information from the device.

January 24, 2017

Forensic Analysis: Botnet Attacking – WordPress Sites Of Pakistan

CK uses a well known shell as a backdoor which is known as the WSO shell. It stores the backdoor in a file called wp-ajax.php which is made to look like a legitimate WordPress core file.It is affecting wordpress websites all around the world and specially in Pakistan on industrial scale.

January 24, 2017

Short Report: Why Associations Need Cyber Security

Think your association isn’t appealing to hackers? Think again. Associations are consistently the most at-risk organizations to be hit by cyber attacks simply due to the sheer volume of data they own, from membership and […]

Cyber Threat Intelligence – Alerts