Diaries by Keyword - SANS Internet Storm Center

Handler on Duty: Didier Stevens

Threat Level: green

Date	Author	Title
CREDENTIAL DUMPS
2014-09-12	Chris Mohan	Are credential dumps worth reviewing?
CREDENTIAL
2024-05-15/a>	Rob VandenBrink	Got MFA? If not, Now is the Time!
2024-03-10/a>	Guy Bruneau	What happens when you accidentally leak your AWS API keys? [Guest Diary]
2024-03-07/a>	Jesse La Grew	[Guest Diary] AWS Deployment Risks - Configuration and Credential File Targeting
2023-10-29/a>	Guy Bruneau	Spam or Phishing? Looking for Credentials & Passwords
2023-08-04/a>	Xavier Mertens	Are Leaked Credentials Dumps Used by Attackers?
2022-10-04/a>	Johannes Ullrich	Credential Harvesting with Telegram API
2022-03-10/a>	Xavier Mertens	Credentials Leaks on VirusTotal
2021-11-08/a>	Xavier Mertens	(Ab)Using Security Tools & Controls for the Bad
2021-05-29/a>	Guy Bruneau	Spear-phishing Email Targeting Outlook Mail Clients
2020-11-18/a>	Xavier Mertens	When Security Controls Lead to Security Issues
2020-04-27/a>	Xavier Mertens	Powershell Payload Stored in a PSCredential Object
2016-09-09/a>	Xavier Mertens	Collecting Users Credentials from Locked Devices
2015-03-18/a>	Daniel Wesemann	Pass the hash!
2015-01-31/a>	Guy Bruneau	Beware of Phishing and Spam Super Bowl Fans!
2014-09-12/a>	Chris Mohan	Are credential dumps worth reviewing?
DUMPS
2023-08-04/a>	Xavier Mertens	Are Leaked Credentials Dumps Used by Attackers?
2022-04-29/a>	Rob VandenBrink	Using Passive DNS sources for Reconnaissance and Enumeration
2014-09-12/a>	Chris Mohan	Are credential dumps worth reviewing?