OSINT-based Email Analyzer for Phishing Detection

It is more and more common to receive emails asking for credentials. They usually say that there is some kind of issue that must be solved by accessing the involved service using the link inside the message text. These emails are often malicious, thought to steal users' or employees' credentials and gain access to personal or corporate areas. This scenario is commonly known as phishing, and nowadays it is the most common cause of corporate data breaches. The attacker tries to exploit human vulnerabilities like fear, concern or carelessness to obtain what would be difficult to achieve otherwise. Even if it is easy from an expert point of view to recognize such attempts, it is not so simple to automatize their detection, due to the fact that there are various techniques to elude systematic checks. Nevertheless, Würth Phoenix wants to improve their cyber defense against any possible threat, and hence they assigned me the task of working on phishing emails detection. This thesis presents a novel program that can analyze all emails delivered to a specifically set up email server without any filtering on incoming traffic, which is then called a "spam-trap-box." Additionally, it is configured with accounts registered for domains owned by failed companies that used to operate in the same industry of Würth Phoenix customers. This way it is more probable to analyze traffic similar to the one in a real case scenario. The innovative part of the analysis implemented is the use of Open Source Intelligence (OSINT) to compare the most relevant parts of an email with evidence of other phishing attempts indexed on the web, which are generally known as Indicators of Compromise (IoCs). After the inspection, if an email is categorized as malicious, new IoCs are created to feed the Würth Phoenix Security Operation Center (SOC), which is the service responsible for the protection against cyber threats offered to their customers. The new indicators include more information than the ones used during the analysis, and the findings are inherent to clients' businesses, thus the SOC has more details to use while analyzing their email traffic

Collaborative Interlaboratory Studies for the Validation of ELISA Methods for the Detection of Allergenic Fining Agents Used in Wine According to the Criteria of OIV Resolution 427–2010 Modified by OIV–Comex 502–2012

The clarification or fining of wine removes undesired substances (mainly proteins, phenols, and tannins), which would roil the wine and cause bitterness and astringency. A common fining agent, egg white, can be directly added to wine through the inlet of a circulating pump, but more typically egg white comes as commercial preparation in powdered form (commercially named egg albumin). Skimmed milk or more frequently purified caseinates are used to remove bitterness and hardness of white wine and sherry. Both egg white and caseinates are fining agents with optimal enological properties, but their residues could represent a risk for subjects suffering from food allergy. The rules for allergen labeling were detailed in Directives 2003/89/EC, and Directive 2005/26/EC established a list of food ingredients provisionally excluded from labeling, that included wine fining agents. Extended till June 2012, wine labeling exemption can be now maintained only if (1) egg and milk derivatives are not used and cross-contamination is under control; and (2) wine clarified with such products is negative for the presence of residues using techniques with detection and quantification limits of 0.25 and 0.5 ppm, respectively. Analytical requirements were defined in the OIV resolution 427–2010 (OIV 2010) modified by OIV/COMEX 502–2012 (OIV 2012). On the basis of a previous experience, an interlaboratory collaborative trial was organized to validate a commercial ELISA kit designed to measure allergenic residues in red wine fined with egg white proteins. In the meantime, the performance of the commercial caseinate ELISA kit for white wine was rechecked according to the new limit of detection and limit of quantification values, recommended by OIV in 2012. The collaborative interlaboratory studies showed that both ELISA kits had good reproducibility, repeatability, and robustness in detecting residues of allergenic fining agents in wine, in good agreement with the requirements of the OIV resolution 427–2010 modified by OIV/COMEX 502–2012

HDL-Mediated Cholesterol Efflux and Plasma Loading Capacities Are Altered in Subjects with Metabolically- but Not Genetically Driven Non-Alcoholic Fatty Liver Disease (NAFLD)

Background. Non-alcoholic fatty liver disease (NAFLD) increases the risk of atherosclerosis but this risk may dier between metabolically- vs. genetically-driven NAFLD. High-density lipoprotein (HDL)-mediated cholesterol efflux (CEC) and plasma loading capacity (CLC) are key factors in atherogenesis. Aims. To test whether CEC and CLC dier between metabolically- vs. genetically-determined NAFLD. Methods: CEC and CLC were measured in 19 patients with metabolic NAFLD and wild-type PNPLA3 genotype (Group M), 10 patients with genetic NAFLD carrying M148M PNPLA3 genotype (Group G), and 10 controls PNPLA3 wild-types and without NAFLD. CEC and CLC were measured ex vivo by isotopic and fluorimetric techniques using cellular models. Results: Compared with Group G, Group M showed reduced total CEC (18.6%; p < 0.001) as well as that mediated by cholesterol transporters (25.3% ABCA1; 16.3% ABCG1; 14.8% aqueous dffusion; all p < 0.04). No difference in CEC was found between Group G and controls. The presence of metabolic syndrome further impaired ABCG1-mediated CEC in Group M. Group M had higher plasma-induced CLC than Group G and controls (p < 0.001). Conclusions: Metabolically-, but not genetically-, driven NAFLD associates with dysfunctional HDL-meditated CEC and abnormal CLC. These data suggest that the mechanisms of anti-atherogenic protection in metabolic NAFLD are impaired

The rhythm of the night: patterns of~activity of the European wildcat in the Italian peninsula

The European wildcat is a threatened carnivore, whose ecology is still scarcely studied, especially in Mediterranean areas. In this study, we estimated activity rhythm patterns of this felid, by means of camera-trapping at three spatial scales: (i) whole country (Italy); (ii) biogeographical areas; (iii) latitudinal zones. The activity rhythms patterns were also calculated according to temporal scales: (1) warm semester; (2) cold semester and (3) seasonal scales. Lastly, we also tested whether the effect of moon phases affected the wildcat activity. We conducted the analysis on a total of 975 independent events collected in 2009-2021, from 285 locations, in 65,800 camera days. We showed that the wildcat in Italy exhibits a > 70% nocturnal behaviour, with 20% of diurnal activity, at all spatial scales, and throughout the whole year, with peaks at 10.00 p.m. and 04.00 a.m. We observed a high overlap of wildcat activity rhythms between different biogeographical and latitudinal zones. The wildcat was mainly active on the darkest nights, reducing its activity in bright moonlight nights. Diurnal activity was greater in the warm months and decreased with the distance from shrubs and woodlands, most likely according to activity rhythms of its main prey, water presence in summer, the care of offspring and the availability of shelter sites. Conversely, the distance to paved roads seems to have no significant effects on diurnal activity, suggesting that, in presence of natural shelters, the wildcat probably may tolerate these infrastructures. We suggested limited plasticity in activity rhythm patterns of the wildcat, emphasizing the importance of dark hours for this species

GEN-O-MA project: an Italian network studying clinical course and pathogenic pathways of moyamoya disease—study protocol and preliminary results

Background: GENetics of mOyaMoyA (GEN-O-MA) project is a multicenter observational study implemented in Italy aimed at creating a network of centers involved in moyamoya angiopathy (MA) care and research and at collecting a large series and bio-repository of MA patients, finally aimed at describing the disease phenotype and clinical course as well as at identifying biological or cellular markers for disease progression. The present paper resumes the most important study methodological issues and preliminary results. Methods: Nineteen centers are participating to the study. Patients with both bilateral and unilateral radiologically defined MA are included in the study. For each patient, detailed demographic and clinical as well as neuroimaging data are being collected. When available, biological samples (blood, DNA, CSF, middle cerebral artery samples) are being also collected for biological and cellular studies. Results: Ninety-eight patients (age of onset mean ± SD 35.5 ± 19.6 years; 68.4% females) have been collected so far. 65.3% of patients presented ischemic (50%) and haemorrhagic (15.3%) stroke. A higher female predominance concomitantly with a similar age of onset and clinical features to what was reported in previous studies on Western patients has been confirmed. Conclusion: An accurate and detailed clinical and neuroimaging classification represents the best strategy to provide the characterization of the disease phenotype and clinical course. The collection of a large number of biological samples will permit the identification of biological markers and genetic factors associated with the disease susceptibility in Italy

Colorectal surgery in Italy during the Covid19 outbreak: a survey from the iCral study group

Background The COVID19 pandemic had a deep impact on healthcare facilities in Italy, with profound reorganization of surgical activities. The Italian ColoRectal Anastomotic Leakage (iCral) study group collecting 43 Italian surgical centers experienced in colorectal surgery from multiple regions performed a quick survey to make a snapshot of the current situation. Methods A 25-items questionnaire was sent to the 43 principal investigators of the iCral study group, with questions regard- ing qualitative and quantitative aspects of the surgical activity before and after the COVID19 outbreak. Results Two-thirds of the centers were involved in the treatment of COVID19 cases. Intensive care units (ICU) beds were partially or totally reallocated for the treatment of COVID19 cases in 72% of the hospitals. Elective colorectal surgery for malignancy was stopped or delayed in nearly 30% of the centers, with less than 20% of them still scheduling elective colo- rectal resections for frail and comorbid patients needing postoperative ICU care. A significant reduction of the number of colorectal resections during the time span from January to March 2020 was recorded, with significant delay in treatment in more than 50% of the centers. Discussion Our survey confirms that COVID19 outbreak is severely affecting the activity of colorectal surgery centers partici- pating to iCral study group. This could impact the activity of surgical centers for many months after the end of the emergency

Lipoprotein(a) Genotype Influences the Clinical Diagnosis of Familial Hypercholesterolemia

: Background Evidence suggests that LPA risk genotypes are a possible contributor to the clinical diagnosis of familial hypercholesterolemia (FH). This study aimed at determining the prevalence of LPA risk variants in adult individuals with FH enrolled in the Italian LIPIGEN (Lipid Transport Disorders Italian Genetic Network) study, with (FH/M+) or without (FH/M-) a causative genetic variant. Methods and Results An lp(a) [lipoprotein(a)] genetic score was calculated by summing the number risk-increasing alleles inherited at rs3798220 and rs10455872 variants. Overall, in the 4.6% of 1695 patients with clinically diagnosed FH, the phenotype was not explained by a monogenic or polygenic cause but by genotype associated with high lp(a) levels. Among 765 subjects with FH/M- and 930 subjects with FH/M+, 133 (17.4%) and 95 (10.2%) were characterized by 1 copy of either rs10455872 or rs3798220 or 2 copies of either rs10455872 or rs3798220 (lp(a) score ≥1). Subjects with FH/M- also had lower mean levels of pretreatment low-density lipoprotein cholesterol than individuals with FH/M+ (t test for difference in means between FH/M- and FH/M+ groups <0.0001); however, subjects with FH/M- and lp(a) score ≥1 had higher mean (SD) pretreatment low-density lipoprotein cholesterol levels (223.47 [50.40] mg/dL) compared with subjects with FH/M- and lp(a) score=0 (219.38 [54.54] mg/dL for), although not statistically significant. The adjustment of low-density lipoprotein cholesterol levels based on lp(a) concentration reduced from 68% to 42% the proportion of subjects with low-density lipoprotein cholesterol level ≥190 mg/dL (or from 68% to 50%, considering a more conservative formula). Conclusions Our study supports the importance of measuring lp(a) to perform the diagnosis of FH appropriately and to exclude that the observed phenotype is driven by elevated levels of lp(a) before performing the genetic test for FH

Vein of Galen aneurysmal malformation in newborns: a retrospective study to describe a paradigm of treatment and identify risk factors of adverse outcome in a referral center

BackgroundVein of Galen aneurysmal malformation (VGAM) is a rare cerebral vascular malformation associated with significant morbidity and mortality. Newborns with VGAM without adequate treatment may develop rapidly deteriorating high output heart failure (HOHF) and are at risk for severe neurological outcomes.ObjectiveTo describe the clinical course and management of newborns with VGAM, and identify which echocardiographic and neuroradiologic factors may be associated with severe heart failure at birth and adverse short term outcomes.MethodsThis is a single center retrospective cohort study including all consecutive newborns with VGAM admitted to Gaslini Children's Hospital between 2009 and 2022. We reviewed clinical data, intensive care support, fetal and neonatal cardiologic and neuroradiologic findings and we studied the association with severe HOHF, endovascular complications and death.ResultsOut of 40 newborns, 17 (42.5%) developed severe HOHF requiring early endovascular procedures. Medical treatment was focused on the main components of HOHF by providing inotropic support and peripheral vasodilation. Pulmonary vasodilators were avoided to reduce the negative effects of pulmonary overflow and prevent vascular remodeling. Reduction of the obligatory left to right shunt through the VGAM was possible only through endovascular treatment. Fetal cardiothoracic ratio was significantly associated with severe HOHF at birth and death. Cardiologic parameters of right ventricular overload, pulmonary hypertension and systemic steal were the leading findings associated with haemodynamic compromise at birth. The mediolateral diameter of the straight or falcine sinus at its shortest section (SS-MD), and arterial pseudofeeders were significantly associated with severe HOHF at birth in prenatal and postnatal assessments. None of the postnatal echocardiographic and MRI variables, nor a higher inotropic support were associated with major periprocedural complications or death. Mortality was due to palliation for congenital severe brain damage (4/40, 10%), or major periprocedural complications (3/40, 7.5%). None of the patients died due to HOHF and multiorgan failure. Overall survival at discharge was 82.5% (33/40).ConclusionsThe complexity of neonatal VGAM pathophysiology requires a multidisciplinary approach, specialized intensive care management, and early endovascular treatment to reduce mortality and optimize clinical outcomes. Cardiologic and neuroradiologic parameters are key to define risk stratification and treatment strategies

Refinement of the diagnostic approach for the identification of children and adolescents affected by familial hypercholesterolemia: Evidence from the LIPIGEN study

Background and aims: We aimed to describe the limitations of familiar hypercholesterolemia (FH) diagnosis in childhood based on the presence of the typical features of FH, such as physical sings of cholesterol accumulation and personal or family history of premature cardiovascular disease or hypercholesterolemia, comparing their prevalence in the adult and paediatric FH population, and to illustrate how additional information can lead to a more effective diagnosis of FH at a younger age.Methods: From the Italian LIPIGEN cohort, we selected 1188 (>= 18 years) and 708 (<18 years) genetically-confirmed heterozygous FH, with no missing personal FH features. The prevalence of personal and familial FH features was compared between the two groups. For a sub-group of the paediatric cohort (N = 374), data about premature coronary heart disease (CHD) in second-degree family members were also included in the evaluation.Results: The lower prevalence of typical FH features in children/adolescents vs adults was confirmed: the prevalence of tendon xanthoma was 2.1% vs 13.1%, and arcus cornealis was present in 1.6% vs 11.2% of the cohorts, respectively. No children presented clinical history of premature CHD or cerebral/peripheral vascular disease compared to 8.8% and 5.6% of adults, respectively. The prevalence of premature CHD in first-degree relatives was significantly higher in adults compared to children/adolescents (38.9% vs 19.7%). In the sub-cohort analysis, a premature CHD event in parents was reported in 63 out of 374 subjects (16.8%), but the percentage increased to 54.0% extending the evaluation also to second-degree relatives.Conclusions: In children, the typical FH features are clearly less informative than in adults. A more thorough data collection, adding information about second-degree relatives, could improve the diagnosis of FH at younger age

Spectrum of mutations in Italian patients with familial hypercholesterolemia: New results from the LIPIGEN study

Background Familial hypercholesterolemia (FH) is an autosomal dominant disease characterized by elevated plasma levels of LDL-cholesterol that confers an increased risk of premature atherosclerotic cardiovascular disease. Early identification and treatment of FH patients can improve prognosis and reduce the burden of cardiovascular mortality. Aim of this study was to perform the mutational analysis of FH patients identified through a collaboration of 20 Lipid Clinics in Italy (LIPIGEN Study). Methods We recruited 1592 individuals with a clinical diagnosis of definite or probable FH according to the Dutch Lipid Clinic Network criteria. We performed a parallel sequencing of the major candidate genes for monogenic hypercholesterolemia (LDLR, APOB, PCSK9, APOE, LDLRAP1, STAP1). Results A total of 213 variants were detected in 1076 subjects. About 90% of them had a pathogenic or likely pathogenic variants. More than 94% of patients carried pathogenic variants in LDLR gene, 27 of which were novel. Pathogenic variants in APOB and PCSK9 were exceedingly rare. We found 4 true homozygotes and 5 putative compound heterozygotes for pathogenic variants in LDLR gene, as well as 5 double heterozygotes for LDLR/APOB pathogenic variants. Two patients were homozygous for pathogenic variants in LDLRAP1 gene resulting in autosomal recessive hypercholesterolemia. One patient was found to be heterozygous for the ApoE variant p.(Leu167del), known to confer an FH phenotype. Conclusions This study shows the molecular characteristics of the FH patients identified in Italy over the last two years. Full phenotypic characterization of these patients and cascade screening of family members is now in progress