The Kraken ransomware group, emerging from the remnants of the HelloKitty cartel, has been observed conducting big-game hunting and double extortion attacks. Utilizing SMB vulnerabilities for initial access, they employ tools like Cloudflared for persistence and SSHFS for data exfiltration. Kraken's cross-platform ransomware targets Windows, Linux, and VMware ESXi environments, featuring a unique benchmarking capability. The group operates a data leak site and has announced a new underground forum called 'The Last Haven Board'. Kraken's sophisticated ransomware includes extensive command-line options, encryption performance testing, and anti-analysis techniques. It targets various file types, including SQL databases and network shares, while employing multi-threaded encryption and self-deletion processes to evade detection.
Petit tuto d'un 'ssh secret' : vous avez une machine distante dont la négociation ssh est lente et c'est chiant pour passer une commande directe qui doit être rapide ? > C'est mon cas avec une #caméra#PTZ Mais j'ai trouvé en farfouillant (c'est pas dans la doc !) qu'on pouvait lui passer des commandes DBus en shell SSH qui font la même chose que les requêtes HTTPS/CGI, mais en beaucoup plus rapide, genre tu veux changer de preset de postition, ça prend 3 plombes, en DBus, c'est direct ! ⤵️
Sicherheitslücken melden: Mein Umgang mit einem Vulnerability Report
Ein Vulnerability Report kam rein: angeblich Terrapin (CVE-2023-48795) auf meinem SSH-Server. Stellte sich raus: fremder Server per CNAME aliased, JavaScript-Typ im Template vergessen. Trotzdem ein guter Anlass zu security.txt und Umgang mit solchen Hinweisen.
Deploying a Kubernetes Cluster on Fedora CoreOS with CRI-O
Immutable systems, such as Fedora CoreOS, are designed for minimal changes and higher reliability. Fedora CoreOS is a Linux distribution optimized for containerized workloads, providing an immutable and minimal operating system for secure and scalable deployments.
In this post, we'll walk through setting up Fedora CoreOS, configuring an SSH key, installing necessary tools like Butane, and setting up a Kubernetes cluster with CRI-O as the container runtime.
Generating an SSH Key
First, […]
FreeBSD SSH-Server absichern: MFA mit Google Authenticator einrichten
Zwei-Faktor-Authentifizierung auf FreeBSD SSH: Google Authenticator PAM-Modul, Challenge-Response in sshd_config, Benutzer-Setup mit QR-Code und Backup-Codes. Erhöht die Sicherheit merklich, unkompliziert einzurichten.
Automate Security: Enable SSH Key Authentication on All Hosts with Ansible
Secure Shell (SSH) is a widely used protocol for secure remote access to servers. One way to enhance the security of your servers is by using SSH key authentication instead of traditional password-based authentication. With Ansible, a powerful automation tool, you can easily configure SSH key authentication on multiple hosts. In this guide, we will walk you through the process of enabling SSH key authentication using your Ansible playbook and configurations.SSH key authentication is a secure […]