Technical

[Asyn]

Fobus, the sneaky little thief that could
https://blog.avast.com/2015/01/15/fobus-the-sneaky-little-thief-that-could/

[Pondus]

Joe Sandbox  for those who want to play  http://www.joesecurity.org/

[Asyn]

The Turn-Verizon Zombie Cookie
http://webpolicy.org/2015/01/14/turn-verizon-zombie-cookie/

[Asyn]

Meet KeySweeper, the $10 USB charger that steals MS keyboard strokes
http://arstechnica.com/security/2015/01/meet-keysweeper-the-10-usb-charger-that-steals-ms-keyboard-strokes/

[Asyn]

Cisco Annual Security Report Reveals Widening Gulf Between Perception and Reality of Cybersecurity Readiness
http://newsroom.cisco.com/press-release-content?type=webcontent&articleId=1576007

[Asyn]

Comparing the Regin module 50251 and the "Qwerty" keylogger
https://securelist.com/blog/research/68525/comparing-the-regin-module-50251-and-the-qwerty-keylogger/

[Asyn]

Deploying tor relays (Mozilla Polaris Privacy Initiative)
https://blog.mozilla.org/it/2015/01/28/deploying-tor-relays/

[Asyn]

Seven Months’ Worth of Mistakes: A Longitudinal Study of Typosquatting Abuse
https://lirias.kuleuven.be/bitstream/123456789/471369/3/typos-final.pdf

[Asyn]

Autoruns v13.0
http://blogs.technet.com/b/sysinternals/archive/2015/01/29/update-autoruns-v13-0.aspx
https://technet.microsoft.com/en-us/sysinternals/bb963902

This major update to Autoruns, an autostart execution point (ASEP) manager, now has integration with Virustotal.com to show the status of entries with respect to scans by over four dozen antimalware engines.

[Asyn]

RansomWeb: emerging website threat that may outshine DDoS, data theft and defacements?
https://www.htbridge.com/blog/ransomweb_emerging_website_threat.html

[Asyn]

Beemer, Open Thyself! – Security vulnerabilities in BMW's ConnectedDrive
http://www.heise.de/ct/artikel/Beemer-Open-Thyself-Security-vulnerabilities-in-BMW-s-ConnectedDrive-2540957.html

[Asyn]

Anatomy of a Brute Force Campaign: The Story of Hee Thai Limited
https://www.fireeye.com/blog/threat-research/2015/02/anatomy_of_a_brutef.html

[Asyn]

MongoDB databases at risk
http://cispa.saarland/wp-content/uploads/2015/02/MongoDB_documentation.pdf

[Asyn]

Mobile Crypto-Ransomware Simplocker now on Steroids
https://blog.avast.com/2015/02/10/mobile-crypto-ransomware-simplocker-now-on-steroids/

[Asyn]

Cyber Espionage Campaign Compromises Web Properties to Target US Financial Services and Defense Companies and Chinese Dissidents in Watering Hole Style Attack
http://www.isightpartners.com/2015/02/codoso/