Incident response lessons from FIRSTCON22
Guest Post: Effective threat hunting, incident response in the cloud, how to stop phishing, and the emotional experience of ransomware.
Tag: phishing
Investigating DNS abuse in Japan
Guest Post: Two DNS-related incidents that we see a lot in Japan are phishing sites and domain hijackings.
Notes from DINR 2021
Presentations at DINR 2021 demonstrated a world of detail and complexity in current DNS research.
Detecting phishing websites via compression-based algorithms
The frequency of keywords affects the compression ratio on phishing websites, which provides a way to spot them.
How to detect if your domains are being abused for phishing attacks
Guest Post: There are several freely available standards, policies and protocols that can help any organization decrease the risk of their domains being abused.
Android Malware and Incident Response
A friend forwarded me a phishy-looking text message…. perfect timing for a fresh example for my incident response class!