Cyber Incident Response Pay2key – December 2020 During the last 10 days, OP Innovate has handled a number of cyber incidents resulting from the Iranian ‘Pay2key’ campaign. This intelligence gathering and ransomware campaign has targeted over 80 Israeli companies thus far and if successful, would have paralyzed significant sectors of Israeli industry. Incident Response Methodology
Read More
“If you want peace, prepare for war” This article is one of a series of articles revealing our Incident Response Framework, including juicy examples from past scenarios. Click to follow us This article in a minute In this article, we share our experiences handling cyber incidents, and the sweeping effects our intervention has had on
Read More
Written by: Dan Shallom, Cyber-security expert at OP Innovate. TL;DR There is a need for awareness of the potential risks of using open-source code Introducing the DLL preloading vulnerability we discovered on Kerberos. Mitigation & helpful tools and utilities. https://www.npmjs.com/advisories/1514 The CVE: https://nvd.nist.gov/vuln/detail/CVE-2020-13110 For those who are not familiar with NPM (Node Package Manager), it is
Read More
TL;DR: Intro to malware The art of disguise – learn about how malware hides itself Ready to look at some real malware? Don’t be a scaredy cat! ♫ Who you gonna call? Us, of course. Ghostly greetings one and all. On Halloween night, children the world over dress up in scary costumes and prowl from
Read More
TL;DR: Journey into the attack life cycle Make the most out of mimicking an offensive campaign to adopt a suitable cybersecurity plan Free tailored strategy for your organization Do you have a Cybersecurity strategy? Creating a planned and defined strategy is good advice for any challenge you face in your personal or professional life. Having
Read More
As a leader of an organization you’re always trying to seize the next opportunity while avoiding unnecessary risks and threats. You can prepare clear strategies, build emergency plans and sometimes even purchase products that will keep your organization safe but most of the time you are so focused on the technological security solutions that
Read More
Ransomware is on the rise. It’s one of the biggest dangers facing small and medium-sized businesses (SMBs) today, especially as it doesn’t differentiate between the recently recruited intern and the seasoned CEO. Anyone can be fooled into opening that malicious attachment. So much so that ransomware is predicted to reach US$20 billion by 2021. Furthermore,
Read More
Do you have impressive credentials? Until quite recently, connecting to a website or online service meant simply typing in a username and password. In the early days, one could even get away with using the same password across multiple sites and services fairly safely. But as the ugly head of cybercrime rears its unwelcome visage,
Read More
You May Not Have a Choice Who do I know who has bitcoin for sale? This question might seem somewhat irrelevant to you right now, especially if you’ve stayed far away from the hype. It is however highly relevant to anyone who has been attacked by ransomware. And you never know where ransomware will hit next
Read More
Post Apocalypse Data World In Sept of 2017, news broke that Equifax, one of the world’s three largest consumer credit reporting bureaus, had suffered a massive data breach. This follows the infamous US OPM (Office of Personnel Management) hack of 2015. The OPM hack, of course, covered government employees and just about anyone who had
Read More