ISC Stormcast For Monday, June 22nd, 2026 https://isc.sans.edu/podcastdetail/9980, (Mon, Jun 22nd)
2026-06-22T13:23:45Z•76ecad93507410e53a9def4cdd934f643c7930168a995f84d083c3ec53595b20
IPv4‑mapped IPv6IPv6JavaScript malwareMSI steganographyRATRemcosSANS ISCSSH brute forceVHDXbrowser securitycredential stuffinge‑bankingmalicious ZIPphishingsecurity telemetry blind spotthreat intelligence
What happened
SANS ISC diary roundup (June 15–22, 2026) covering multiple security incidents and research: a targeted e‑banking phishing campaign delivered using IPv4‑mapped IPv6 addressing (targets a major Belgian bank); a malicious ZIP (SHA256 a0104921a2d37ab87482ac9a9f5c3713479c118846c3e999178e75b81620c094) containing a VHDX that auto‑mounts on modern Windows, exposing JavaScript that leads to a Remcos RAT infection; analysis of coordinated SSH brute‑force activity over the prior three months; a writeup about browser “blind spots” where security tools may not block expected content; and research into ste
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 76ecad93507410e53a9def4cdd934f643c7930168a995f84d083c3ec53595b20
- Enrichment time
- 2026-06-22T13:23:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.