Top all-time · #4430
AT&T Business
Company blog · cybersecurity.att.com/blogssecurity
AT&T Business is the company blog at cybersecurity.att.com, writing about security. Since 2019, 17 different Hacker News readers have linked it 18 times, most often “The Great Cannon has been deployed again”. No feed was found, so read it on the site itself.
Too few sampled comments (10) to say how often HN recommends it.?
Why HN links it
HN readers link AT&T Alien Labs research posts on malware and threat campaigns, such as the JaskaGO Go-based malware, the ProxyNation proxy botnet, the Great Cannon and Shikitega, for technical detail.
Summarised by Claude from a sample of 10 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
AT&T Cybersecurity delivers advanced mobile security, network security solutions, and data protection to ensure the integrity and security of your business operations.
Most-linked posts?
- The Great Cannon has been deployed again3 people · 3 mentions · first linked 2019-12-05
- /blogs/labs-research/behind-the-scenes-jaskagos-coordinated-strike-on-macos-and-windows2 people · 2 mentions · first linked 2023-12-21
- /blogs/security-essentials/capture-the-flag-ctf-what-is-it-for-a-newbie2 people · 2 mentions · first linked 2020-04-27
- Shikitega – New undetectable malware targeting Linux - infection case study2 people · 2 mentions · first linked 2022-09-09
What Hacker News says?
> HTTPS is unnecessary for this site. The Great Cannon enjoys your continued support. https://cybersecurity.att.com/blogs/labs-research/the-great-...
Comment linking /blogs/labs-research/the-great-cannon-has-been-deployed-again
on “Show HN: Space Invaders in C”Submitted The Great Cannon has been deployed again as a story · 1043 points
HN discussion> Have you ever had to debug a "blackbox" before, Application code or hardware that you had really nothing to do with and had to figure out how in the hell it works? I suppose so, yes, but probably not to the extent required in some of these challenges. I just read through https://cybersecurity.att.com/blogs/security-essentials/capt... and some of the accompanying write ups[0] on Github which was very insightful. [0…
Comment linking /blogs/security-essentials/capture-the-flag-ctf-what-is-it-for-a-newbie
on “US Air Force Space Security Challenge 2020: Hack-a-Sat”Submitted AT&T Alien Labs finds Golang malware targeting millions of routers/IoT devices as a story · 7 points
HN discussion>> The more I learn about the networking side the more interested I am in how to secure this, and I'm less interested in writing code. Be warned, most 'security' jobs are running scripts and programs and filling out checklists. If you were interested in writing code I'd suggest books like Reversing: Secrets of Reverse Engineering or Hacking: The Art of Exploitation That said, a good way to get into it is to find any…
Comment linking /blogs/security-essentials/capture-the-flag-ctf-what-is-it-for-a-newbie
on “Ask HN: Any tips for a programmer wanting to switch into security?”Submitted Slack phishing attacks using webhooks – AT&T Alien Labs as a story · 3 points
HN discussionThe discovering group (AT&T Alien Labs) wrote a pretty useful blog post "Behind the scenes: JaskaGO’s coordinated strike on macOS and Windows"[0], which goes into interesting detail on how it behaves (fake error message popup, the anti-vm detection, the trivial tasks if it thinks it's in a VM, the malicious tasks it can attempt if prompted by the command & control). TechRadar summarizes thehackernews which summarize…
Comment linking /blogs/labs-research/behind-the-scenes-jaskagos-coordinated-strike-on-macos-and-windows
on “Windows and macOS targeted by new Go-based malware”Submitted ProxyNation: The dark nexus between proxy apps and malware as a story · 2 points
HN discussionSome technical details linked from the article… https://cybersecurity.att.com/blogs/labs-research/behind-the...
Comment linking /blogs/labs-research/behind-the-scenes-jaskagos-coordinated-strike-on-macos-and-windows
on “Something nasty injected login-stealing JavaScript 50K online banking sessions”Submitted Shikitega – New undetectable malware targeting Linux - infection case study as a story · 2 points
HN discussionOriginal source is down - coincidence? https://cybersecurity.att.com/blogs/labs-research/the-great-...
Comment linking /blogs/labs-research/the-great-cannon-has-been-deployed-again
on “China Resurrects Great Cannon for DDoS Attacks on HK”Submitted Authenticating legacy apps with a reverse proxy as a story · 2 points
HN discussionChange to https://cybersecurity.att.com/blogs/labs-research/shikitega-...
Comment linking /blogs/labs-research/shikitega-new-stealthy-malware-targeting-linux
on “New Linux malware combines unusual stealth with a full suite of capabilities”Submitted VLAN Hopping Attacks and Mitigation Best Practices as a story · 2 points
HN discussionhttps://www.theguardian.com/commentisfree/2015/feb/20/att-pr... It’s even explained on their site: https://cybersecurity.att.com/blogs/security-essentials/what... Justification: to keep you safe!1
Comment linking /blogs/security-essentials/what-is-deep-packet-inspection
on “VPN use is at an all-time high – but are people safe?”Submitted BotenaGo strikes again – malware source code uploaded to GitHub as a story · 1 points
HN discussionIt's unlikely that companies would pay for such data, as it is shared for free in places like FB ThreatExchange or https://cybersecurity.att.com/open-threat-exchange (and some others that are more secret) You could potentially otherwise check https://www.projecthoneypot.org/ This is the ancestor of Cloudflare and still actively flagging IPs for bad bots, which is probably a source in Cloudflare itself.
Comment linking /open-threat-exchange
on “Ask HN: Is there a market for selling IPs identified as bot traffic?”>>The proxy application and most of the malware delivering it are packed using Inno Setup, a free and popular Windows installer.<< ProxyNation: The dark nexus between proxy apps and malware https://cybersecurity.att.com/blogs/labs-research/proxynatio...
Comment linking /blogs/labs-research/proxynation-the-dark-nexus-between-proxy-apps-and-malware?ref=thefinalhop.com
on “AT&T Alien Labs Uncovers Expansive Campaign: Windows Machines Ensnared in Proxy”
