#parm.txt

[medusozoic]

So I haven't smoked my whole life bc I'm very very very against smoking and I keep to my principals with that. I have friends who smoke and people offering me shit (mainly bc I always go outside with the smoker people bc I like outside lol). So anyways. Very strong willed on that particular. Until yesterday where I had a dream where a pretty girl offered me a cig (this was our first interaction) and I immediately started smoking. Still not over that why is dream me so weak what does that say about me

[terabitweb]

Original Post from Security Affairs Author: Pierluigi Paganini

China-linked APT41 group is targeting telecommunications companies with a new piece of malware used to spy on text messages of highly targeted individuals.

Researchers at FireEye discovered a new backdoor tracked as MessageTap that China-linked APT41 group are using to spy on text messages sent or received by highly targeted individuals

The experts found the MessageTap backdoor installed on a Linux-based Short Message Service Center (SMSC) server belonging to an unnamed telecommunications company. A Short Message Service Center (SMSC) is a network element in the mobile telephone network.

“FireEye Mandiant recently discovered a new malware family used by APT41 (a Chinese APT group) that is designed to monitor and save SMS traffic from specific phone numbers, IMSI numbers and keywords for subsequent theft.” reads the analysis published by FireEye. “Named MESSAGETAP, the tool was deployed by APT41 in a telecommunications network provider in support of Chinese espionage efforts.”

The APT41 has been active since at least 2012, it was involved in both state-sponsored espionage campaigns and financially-motivated attacks since 2014. The group hit entities in several industries, including the gaming, healthcare, high-tech, higher education, telecommunications, and travel services industries.

Unlike other China-based actors, the group used custom malware in cyber espionage operations, experts observed 46 different malware families and tools in APT41 campaigns.

“MessageTap” is a 64-bit ELF data miner that upon execution checks for the existence of two files, keyword_parm.txt and parm.txt, that contain instructions for MESSAGETAP to target and save contents of SMS messages.

The first file (parm.txt) contains a list of International Mobile Subscriber Identity (IMSI) numbers and a list of phone numbers, the second file (keyword_parm.txt) includes a list of keywords that are read into keywordVec.

If the two files are present on the target machine, their contents are read and XOR decoded with a string containing a URL owned by the European Telecommunications Standards Institute (ETSI) pointing to a document that explains the Short Message Service (SMS) for GSM and UMTS Networks

Once the malware is executed, the configuration files are deleted from the disk, then MESSAGETAP begins monitoring all network connections to and from the server. The spyware uses the “libpcap library to listen to all traffic and parses network protocols starting with Ethernet and IP layers. It continues parsing protocol layers including SCTP, SCCP, and TCAP. Finally, the malware parses and extracts SMS message data from the network traffic:”

SMS message contents

The IMSI number

The source and destination phone numbers”

MessageTap is able to filter messages sent or received by specific phone numbers, containing certain keywords, or with specific IMSI numbers.

SMS messages of interest are saved to CSV files for later theft by the threat actor.

Experts pointed out that the use of unencrypted data expose users to the risk of being intercepted by threat actors. Highly targeted individuals such as dissidents, journalists, and officials that handle highly sensitive information are particularly exposed to cyber espionage campaigns carried out by nation-state hachers.

Experts at FireEye Mandiant also found APT41 hackers stealing call detail records (CDR) corresponded to high-ranking foreign individuals.

“In addition to MESSAGETAP SMS theft, FireEye Mandiant also identified the threat actor interacting with call detail record (CDR) databases to query, save and steal records during this same intrusion. The CDR records corresponded to foreign high-ranking individuals of interest to the Chinese intelligence services.” concludes the analysis. “Targeting CDR information provides a high-level overview of phone calls between individuals, including time, duration, and phone numbers. In contrast, MESSAGETAP captures the contents of specific text messages.

Experts have no doubts, hackers will continue to target telecommunications companies for cyber espionage campaigns.

window._mNHandle = window._mNHandle || {}; window._mNHandle.queue = window._mNHandle.queue || []; medianet_versionId = "3121199";

try { window._mNHandle.queue.push(function () { window._mNDetails.loadTag("762221962", "300x250", "762221962"); }); } catch (error) {}

Pierluigi Paganini

(SecurityAffairs – APT41, China)

The post China-linked APT41 group targets telecommunications companies with new backdoor appeared first on Security Affairs.

#gallery-0-6 { margin: auto; } #gallery-0-6 .gallery-item { float: left; margin-top: 10px; text-align: center; width: 33%; } #gallery-0-6 img { border: 2px solid #cfcfcf; } #gallery-0-6 .gallery-caption { margin-left: 0; } /* see gallery_shortcode() in wp-includes/media.php */

Go to Source Author: Pierluigi Paganini China-linked APT41 group targets telecommunications companies with new backdoor Original Post from Security Affairs Author: Pierluigi Paganini China-linked APT41 group is targeting telecommunications companies with a new piece of malware used to spy on text messages of highly targeted individuals.

[medusozoic]

There's an AD to babysit the BEST DOG I'VE EVER SEEN IN MY APPARTMENT BUILDING. AND MY FUCKING ROOMMATE ALSO ALREADY APPLIED. NO. NO!! MY DOGGO

[medusozoic]

Me: uses vr to box for the first time in months, gets a good workout: 'wow that was so much fun. Why don't I do this more often. Yes actually I should start taking those boxing lessons at the gym. Why haven't I? *Remembers broken wrist* 'oh. Right'

[medusozoic]

So. What I'm really loving right now is that I've been getting into what I wear way more. And this was already so fun because I never felt comfortable in anything until I was completely open and comfortable with my sexuality. So before that I went shopping like once a year, hated it, had 2 pants and like 4 sweaters and that's it.

But the last 2 years I've started to absolutely love shopping. I still hated going through the women's section, just went straight to the mens and had the time of my life. My style has very much improved and I feel like I actually know what I'm doing with fashion.

And now the present. I'm actually starting to buy and wear feminine clothes. Which is something I'd never expected. And I'm getting hyper over buying crop tops or backless body's and it's just so amazing how I was able to finally comfortable with my feminine side through accepting my masculine side

[medusozoic]

My god I love gay people

[medusozoic]

Do you ever just. Want to cry

[medusozoic]

My sister (very much not in the queer scene): 'oh what are their pronouns?

Me: 'she/they'

My sister: '....' 'you can have multiple?'

[medusozoic]

hey how old were u when you found out that triominos is literally dominos but with. three sides. and that that's very obvious since the whole -ominos part because. I found out rn

[medusozoic]

Watching euphoria and pointing out plotholes like 'tumblr doesn't let capital letters in usernames' and 'tumblr doesn't show follower counts ' because I'm a normal person

[medusozoic]

Really funny thing is how in my experience only cishet people care about what exactly your identity is. I'm part of a queer students thingy and I've never heard anyone ask about someone else's sexuality or gender identity. Like we ask pronouns and stuff and that's about it. In a drinking game the question 'have you had sex with the same gender' might pass. But no one's ever walked up to be like 'hey what exactly are you' the way cishet people have

[medusozoic]

Obligatory I am still in love with Camilla Hect post

[medusozoic]

Just saw an American making pasta pesto and it. It was literally just pasta with pesto. Like no girly that's gonna need some vegetables protein and cheese

[medusozoic]

2023 goals r just more tattoos more muscles