Quasar RAT Delivered Through Bat Files #SANSISC
https://isc.sans.edu/diary/32036

Be Careful With Fake Zoom Client Downloads #SANSISC
https://isc.sans.edu/diary/32014

Njrat Campaign Using Microsoft Dev Tunnels
https://isc.sans.edu/diary/31724
#SANSISC

XWorm Cocktail:  A Mix of PE data with PowerShell Code https://isc.sans.edu/diary/31700 #SANSISC

The Danger of IP Volatility
https://isc.sans.edu/diary/31688
#SANSISC

Fake BSOD Delivered by Malicious Python Script
https://isc.sans.edu/diary/31686
#SANSISC

From PowerShell to a Python Obfuscation Race! https://isc.sans.edu/diary/31634 #SANSISC

Fileless Python InfoStealer Targeting Exodus https://isc.sans.edu/diary/31630 #sansisc

From a Regular Infostealer to its Obfuscated Version https://isc.sans.edu/diary/31484 #SANSISC

Python RAT with a Nice Screensharing Feature https://isc.sans.edu/diary/31414 #SANSISC

Gotta say, one month after posting this and regularly trying to listen to podcasts like the SANS Internet Stormcenter[1], I still don't get it. But I was able to narrow down my issues with that form of infotainment.

First of all, I have to have my headphones on to listen to podcasts because I'm not some degenerate who just blasts Johannes Ullrich's godly voice to the masses. This kinda works out when I'm in public transport to the office (#DeathBeforePublicTransportWithoutHeadphones), but when working from home, it's not that simple - or at least, it's not a habit (yet?). So that kinda limits my window of opportunity to just a few hours per week.

Then, I found out that I just tend to do other stuff - i.e. working on my photography stuff or my infosec job. This usually puts me in ✨tHe ZoNe✨ and I just blank out everything I hear. And suddenly, the day is over, you go to sleep, and a few hours later AntennaPod sends you a notification that the next daily episode is available. Rinse and repeat.

With music, that's totally fine. It's not like you need to religiously follow each line of Cardi B.'s "Wet Ass Pussy" to get the full story. With podcasts, you just miss info all the time if you don't focus. You can't blank out. You have to sit down and listen to the speakers, as if they were in the room, talking to you. Everything else is kinda rude.

So, interim conclusion, I guess? It's complicated. Habits only stick if you have as little friction as possible.



Will Markus ever reconcile with the Casting of Pods? Tune in next month to read the new episode of "What The Actual Fuck Is The Deal With Podcasts??" by @markuswet


_____________
#SANS #InternetStormCenter #SANSISC #JohannesUllrich #Podcast #Podcasts

[1] https://isc.sans.edu/podcast.html

RE: https://toot.io/users/markuswet/statuses/110641309145744011