Conversation

Notices

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Wednesday, 17-Jan-2024 17:48:49 JST Kevin Beaumont

   Another service to proxy and firewall block for ransomware group resilience - Wasabi https://wasabi.com

   LockBit use them for data exfil.

   • Embed this notice
     System Adminihater (systemadminihater@cyberplace.social)'s status on Wednesday, 17-Jan-2024 18:00:04 JST System Adminihater

     in reply to

     @GossiTheDog The cloud fixes this... ohhhh shittt

   • Embed this notice
     System Adminihater (systemadminihater@cyberplace.social)'s status on Thursday, 18-Jan-2024 00:50:54 JST System Adminihater

     in reply to

     @GossiTheDog Oh, I forgot you may as well also block backblaze too.

   • Embed this notice
     Brian Clark (deepthoughts10@infosec.exchange)'s status on Friday, 19-Jan-2024 06:31:28 JST Brian Clark

     in reply to

     @GossiTheDog Wasabi uses the domain wasabisys.com for their storage service. You should block access to *.wasabisys.com too #threatintel

     https://docs.wasabi.com/docs/service-urls?highlight=url