SISSDEN is an H2020 EU project (Grant Agreement 700176) that plans to improve cyber security in the EU by providing free-of-charge victim notification services.
Europe
Joined June 2016
- Tweets150
- Following58
- Followers521
- Likes51
Pinned Tweet
This project receives funding from the @EU_H2020 Research and Innovation Programme. Any related tweets reflect only the views of the project owner.
Check out our video summarizing the H2020 SISSDEN project here: vimeo.com/363340240
H2020 SISSDEN Project retweeted
just released fatt; a script for extracting network metadata and fingerprints from pcap files and live network traffic. Go fingerprint all the things! github.com/0x4D31/fatt #honeypot #ThreatHunting
H2020 SISSDEN Project retweeted
A clever use of MISP from the @sissden project which extracts malware configuration into specific MISP objects to browse and share the collected configuration and indicators. sissden.eu/download/SISSDEN-… #ThreatIntel
H2020 SISSDEN Project retweeted
My very quick look at recent Oracle Weblogic exploitation attempts.
sissden.eu/blog/oracle-weblo…
A quick look into recent Oracle Weblogic 0day exploitation attempts sissden.eu/blog/oracle-weblo…
Interested what honeypot types and amounts are currently deployed in SISSDEN? Have a look here now: sissden.eu/blog/honeypots-de…
H2020 SISSDEN Project retweeted
Dear CERT / CSIRT,
Dear ITSec service provider,
if journalists can use an Nmap to scan for #Winnti infections, then you can do it too.
Script (as shared before in March 2018)
github.com/TKCERT/winnti-nma…
#Bayer #BayerHack
Current SISSDEN honeypot sensor IP map - 255 sensors delivered in 58 countries, 981 IPs, 383 /24's, 119 unique ASNs. Subscribe to free SISSDEN reports here: portal.sissden.eu
Running the latest T-Pot as a vetted SISSDEN user? You can now contribute your data to SISSDEN! Check out how in this blog post sissden.eu/blog/tpot-integra… T-Pot 19.03 is available here: github.com/dtag-dev-sec/tpot…
You can subscribe to free daily SISSDEN reports using the Customer Portal at portal.sissden.eu/. These include reports on IoT related malware propagation, brute force attacks, various forms of scanning activity, remote exploitation attempts, DDoS amplification attacks, etc
The SISSDEN Project is also present at the #firstcti event in London. See you there!
good morning #firstcti attendees! training day today! reg opens at 8am - be sure to double check what session you reg'd for and which building you need to propel your body towards this morning :-) ow.ly/eAq430o560T
Finding perpetrators behind amplification DDoS attacks may sound like a daunting task due to the source spoofing and reflected nature of the attacks. Is it really that hopeless though? Read up on our methodology here: sissden.eu/blog/finding-perp… and paper: christian-rossow.de/publicat…
Our project is at the @tfcsirt and @FIRSTdotOrg symposium this week in Tallinn! Come and meet us to discuss honeypot networks and please consider hosting our sensor! sissden.eu/blog/sensor-netwo…
H2020 SISSDEN Project retweeted
In our newest blogpost, we're describing #MWDB - our new database of samples and various information gathered from malware. We're also inviting malware analysts to cooperate with us, more details can be found in the article.
cert.pl/en/news/single/mwdb-…
An overview of the SISSDEN honeypot sensor network: currently 226 sensors operational. 953 IPs spread across 112 ASNs and 58 countries. Check out the maps here: sissden.eu/blog/sensor-netwo…
H2020 SISSDEN Project retweeted
Approaches for Preventing Honeypot Detection and Compromise
reddit.com/r/honeypot/commen…
H2020 SISSDEN Project retweeted
Heads-up, Emotet / Heodo is back in town!
URLhaus:
urlhaus.abuse.ch/browse/tag/…
Feodo Tracker:
feodotracker.abuse.ch/browse…
H2020 SISSDEN Project retweeted
We did some quick statistics on the top 30 most queried CVE on cve.circl.lu (via the API) - it's giving an insight and/or perception of the most popular vulnerabilities queried (by users and/or adversaries). #vulnerability
