SNORT SIGNATURE: MS12-020 ET EXPLOIT Microsoft RDP Server targetParams Exploit Attempt

This rule is from the good folk at Emerging Threats who decided to forgo the commercial opportunity that would have accompanied holding it back in their Professional feed. Kudos.

alert tcp any any -> $HOME_NET 3389 (msg:”ET EXPLOIT Microsoft RDP Server targetParams Exploit Attempt”; flow:to_server,established; content:”|03 00|”; depth:2; content:”|7f 65 82 01 94|”; distance:24; within:5; content:”|30 19|”; distance:9; within:2; byte_test:1,<,6,3,relative; reference:url,msdn.microsoft.com/en-us/library/cc240836.aspx; reference:cve,2012-0002; classtype:attempted-admin; sid:2014383; rev:2;)

SCAM: Watch the Most Embarrassing moment ever in Live Beauty Contest…

Another one!!! The following link is fake:

Watch the Most Embarrassing moment ever in Live Beauty Contest…

This will also take you to a different page (http://embss.recentnewsheadlines.com ) which will clickjack your Facebook and possibly download bad stuff. Avoid it at all costs and please let your friends who are falling for it know…

 

p.s. Please Like, Retweet and +1 this link. It helps heaps to get the word out!

Interesting piece of SPAM

I got this last night and about 1:00am.

I’m posting it because, despite having what I consider to be a reasonably mature eye for SPAM, I very nearly fell for this one.

TITLE: Your Amazon.com order of “Haier 1PT45G Pulsator 1-Cubic-Foot Portable Washer” has shipped!

Hello,

Shipping Confirmation
Order # 117-4695088-7488809

Your estimated delivery date is:
Tuesday, December 30, 2011

Track your package Thank you for shopping with us. We thought you’d like to know that we shipped this portion of your order separately to give you quicker service. You won’t be charged any extra shipping fees, and the remainder of your order will follow as soon as those items become available. If you need to return an item from this shipment or manage other orders, please visit Your Orders on Amazon.com.

Shipment Details

Haier 1PT45G Pulsator 1-Cubic-Foot Portable Washer $189.95
Item Subtotal: $189.95
Shipping & Handling: $0.00
Total Before Tax: $189.95
Shipment Total: $189.95
Paid by Visa: $189.95

You have only been charged for the items sent in this shipment. Per our policy, you only pay for items when we ship them to you.

Returns are easy. Visit our .
If you need further assistance with your order, please visit Customer Service.

We hope to see you again soon!
Amazon.com

My initial reaction was “Oh, I thought my wife was asleep” followed closely by “What the heck is she doing buying a washing machine…?”.

Granted that I was tired and the are more than a few clues that give this one away (the most telling being that the links, which I’ve removed, got to http://www.carnavaldechiclana.com which appears to be configured for the sole purpose of validating if an email address has a human behind it or not) but I have to say that, give the time of year and the propensity for random purchases, I consider this to be a pretty effective SPAM campaign.

A Golden Rule Of Avoiding Internet Fraud

This is a simple one that I told my mother-in-law the other day. It won’t protect you from everything, but it will greatly reduce your exposure.

Don’t comply with any request that you didn’t expect.

Simple right?

Put differently – any time your “computer” is proactive about asking you for personal details, credit card numbers, etc then you should flatly refuse, regardless of the terrible things that “might happen”. The same goes for any emails or social media requests that come in.

Don’t do it.

How Do I Access “My Tweets, Retweeted” With The New “Activity” Tab?

One of the most important social media metrics on Twitter (hint: _WAY_ more important than number of followers or follower ratio) is “My Tweets, Retweeted”. This tells you what of your content is being reshared by your audience (i.e. what is being amplified). If you pay attention to this you can get a pretty good feel for what is working and what isn’t and hone your content, tone and targeting accordingly.

Unfortunately the new “Activity” tab that Twitter have rolled out has removed the old tab for this. So how do you get to it?

Here’s the link… https://twitter.com/#!/retweeted_of_mine

Useful? I hope so.

How To Avoid Bricking Your iPhone or iPad During Upgrade to iOS 5

Note: I know I get a bit geeky on here from time to time, but this is targeted at people who’d consider themselves “not really technical”.

Lots of people will be updating their iPhones and iPads to iOS 5 today. The release has only been out for a few hours and already I’ve been contacted by people who’s device has “bricked” during the upgrade.
FIRST THINGS FIRST – Do you need to do it now? I know it’s exciting and all that, but Apple do have a bit of a habit of releasing an operating system and then quickly following it up with an “improved” version once the early adopter have ironed out all of the bug. Selah.

Ok, so you’re still going ahead with it? Here’s a few ways you can minimize the risk of your update failing and “bricking” your device…

  • The golden rule is to remove any risk of the upgrade being interrupted, so…
  • Make sure the phone is fully charged before you start.
  • Make sure the host computer (the one that the phone is plugged into to perform the upgrade) is plugged in and any sleep, hibernation, or power save functions are disabled. Obviously this is most relevant if you’re using a laptop.
  • Turn off the passcode on the phone.
  • Put the phone in airplane mode to prevent interruption from calls, messages, email notifications, etc.
  • Read the freaking manual! Don’t just click next, next, next.  There are important suggestions and information given through the process that you should read.
  • Finally – If you’re not confident, don’t do it. Just wait until “that friend who’s good with computers” is around and ask him nicely, perhaps offering a cold beverage or such in return ;)

Have I missed anything? Did this help? Leave your comments or input below!

UPDATE: At 10am AEDST on the 13/10/11 the Apple servers seem to be a bit grumpy with all of this fun. Waiting a few days is probably a very good idea.