SANS Stormcast Friday Feb 28th: Njrat devtunnels.ms; Apple FindMe Abuse; XSS Exploited; @sans_edu Ben Powell EDR vs. Ransomware

This SANS Internet Storm Center Stormcast episode covers several cybersecurity threats. The podcast discusses the use of Microsoft dev tunnels by Njrat malware for credential exfiltration, highlighting `devtunnels.io` as a key indicator of compromise. It also details a method to subvert Apple's MyFind network using spoofed keys, costing approximately $5 in cloud computing time, and mentions a patch released in iOS 18.2. Finally, it examines a cross-site scripting vulnerability in the Crepano library used for 360-degree virtual tours, currently exploited for advertising but with potential for more malicious use. The episode concludes with an interview segment on ransomware defense strategies using Microsoft Defender for Business and Wazoo, contrasting their capabilities in detection and customization.