Jump to content

Rami

ESET Insiders
  • Content Count

    542
  • Joined

  • Days Won

    9

Kudos

  1. Upvote
    Rami received kudos from ProTruckDriver in What License Do I Buy?   
    Check here : https://www.eset.com/us/home/multi-device-security/
  2. Upvote
    Rami received kudos from BeanSlappers in Error message from Windows at version 12.2.28.0   
    Do you mean that it takes a little bit of time for Windows to detect that ESET is running?
  3. Upvote
    Rami gave kudos to itman in CamScanner detected as trojan downloader (ESET Mobile)   
    Kaspersky just published an analysis on CamScanner:
    https://securelist.com/dropper-in-google-play/92496/
  4. Upvote
    Rami gave kudos to Marcos in ransomware attack   
    Just came across a case when a user was hit by Filecoder.Phobos and asked how come they got infected with ESET installed. After analyzing logs, we found out that:
    - the detection for the ransomware was added at least 2 months before the incident
    - password protection of ESET's settings was not enabled
    - detection of potentially unsafe applications was disabled

    We also found out that:
    1, A brute-force RDP attack was performed:
    - Administrator had 22 377 failed login attempts
    - ADMINISTRATOR had 5 438 failed login attempts
    - ADMINISTRADOR had 1 102 failed login attempts
    - ADMIN had 710 failed login attempts
    2, There was a suspicious RDP connection from a foreign country
    3, A local user GhostUser has been created recently
    4, A legitimate tool that can be misused to kill security software has been installed recently (detected as pot. unsafe application)
    5, Event logs have been recently cleared.

    This is a proof that just having a security software installed is not enough; firstly RDP must be secured. Secondly, all critical operating system updates must be installed. Fourthly, ESET must be protected with a password and detection of potentially unsafe applications enabled to prevent protection from being tampered by unauthorized persons.
  5. Upvote
    Rami gave kudos to notimportant in ransomware attack   
    This is not an excuse. I see this all the time in the customers logs when brute force attacks are performed against RDP.
  6. Upvote
    Rami gave kudos to Marcos in a variant of EFI.CompuTrace.A   
    For more information, please refer to:
    https://support.eset.com/kb6567/
    https://www.welivesecurity.com/2018/09/27/lojax-first-uefi-rootkit-found-wild-courtesy-sednit-group/
    https://www.welivesecurity.com/wp-content/uploads/2018/09/ESET-LoJax.pdf
  7. Upvote
    Rami gave kudos to Marcos in EvilGnome Detection?   
    Detected by many AVs:

  8. Upvote
    Rami gave kudos to Leonardo in Future changes to ESET Internet Security and ESET Smart Security Premium   
    Hello @Rami 
    You are right ! That is a very friendly program?
  9. Upvote
    Rami received kudos from Aryeh Goretsky in Future changes to ESET Internet Security and ESET Smart Security Premium   
    It's not that big deal in my opinion @nonamelab, It's a way to bring more people to use ESET and in the same time giving the person who invited the other person who doesn't use ESET , a month of usage or more I don't remember exactly.
  10. Upvote
    Rami received kudos from Leonardo in Future changes to ESET Internet Security and ESET Smart Security Premium   
    It's not that big deal in my opinion @nonamelab, It's a way to bring more people to use ESET and in the same time giving the person who invited the other person who doesn't use ESET , a month of usage or more I don't remember exactly.
×
×
  • Create New...