threat intelligence
Posts tagged “threat intelligence”.
Why is an app on my PC talking to a Tor exit node?
Usually because something on your PC accepts connections arriving through Tor, a peer-to-peer app met a Tor user, or a program uses Tor itself. Malware does too, so check the app and direction.
Is my computer being tracked? What your network traffic says
Almost certainly, by ad and analytics services, which is normal and mostly happens in your browser. Signs of worse are specific: unknown programs, steady check-ins and flagged addresses.
Newly registered domains: a quiet warning sign
Phishing and malware campaigns tend to use domains registered days earlier, before blocklists catch up. A very young domain proves nothing alone, but it adds weight when an app already looks wrong.
Network visibility for a small office without an IT department
Watch three things on each PC: programs you don't recognize going online, unusually large uploads, and threat-list hits. Then add phone alerts and a 15-minute weekly review. No IT staff needed.
How to spot malware by its network traffic
Almost all malware has to talk to someone. Look for unknown or unsigned programs online, odd ports, check-ins on a timer, lopsided uploads, threat-listed addresses and Windows tools going online.
Threat-intelligence IP lists: what they catch and what they miss
Threat-intelligence IP lists name addresses already tied to botnets, hacked machines, spam networks or Tor. They catch known infrastructure well but miss new servers and can mislabel shared addresses.
NetSecWall 1.2.0: Family and Pro leave beta
NetSecWall 1.2.0 takes Family and Pro out of beta, signs the installer and app, downloads every list from NetSecWall's servers on all plans, and brings license-key entry back into the app.