ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd)
2026-07-04T19:23:42Z•c48bb4a2e6532ea97b055308e3fb063537f7b28947784355d2c865c5695131ff
T1036apple-updatescredential-theftcrypto-walletcybercrimefaviconisc_sansmalware-obfuscationmetamaskpentestphishingprocess-masqueradingreconnaissancerootkitsecurity-patchesvelvet-antyarayara-x
What happened
This ISC SANS diary collection (late June–early July 2026) highlights several security topics: a phishing campaign targeting MetaMask (cryptocurrency wallet) that solicits credentials via purported "secret codes"; June 2026 Apple security updates for iOS/iPadOS/macOS/Safari; YARA-X 1.18.0 and 1.19.0 releases with enhancements and bugfixes; automation techniques for host reconnaissance using favicon.ico; and a detailed discussion of Linux process name masquerading (ATT&CK T1036) — a malware obfuscation/rootkit technique observed in activity attributed to the Velvet Ant group. Also included is a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- c48bb4a2e6532ea97b055308e3fb063537f7b28947784355d2c865c5695131ff
- Enrichment time
- 2026-07-04T19:23:42Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.