Troy Hunt

APRIL 18, 2019

All that and more in this week's update: References We're at NDC Security on the Gold Coast week after next (Scott's doing the World's Best TLS Training, I'm doing Hack Yourself First) Let's Encrypt's transition to ISRG root (that post of Scott's went to number 1 on Hacker News so good work on that mate!)

Encryption 143

Encryption Hacking 143

Malwarebytes

NOVEMBER 16, 2021

Not only had the infrastructure been dismantled, but previously infected computers had received a special update that would effectively remove the malware at a specific date. Out of the woods again. On November 15, security researchers who’ve tracked Emotet announced that the threat was back. A return of malspam waves and ransomware?

InfoSec 82

InfoSec Ransomware Malware 82

Security Boulevard

MARCH 30, 2022

The hackers then hid the malware inside legitimate software updates. As a result, customers unwittingly downloaded Havex-infected updates. The hacking campaigns were directed at hundreds of companies and organizations in 135 countries. One of the indictments, United States v.

Software 52

Software Government InfoSec Malware 52

CyberSecurity Insiders

APRIL 4, 2023

The latest iteration of this is the collapse of Silicon Valley Bank (SVB) and the resulting banking crisis, which has presented an opportunity for attackers to spoof highly sensitive communication, for example seeking to intercept legitimate communication instructing recipients to update bank details for payroll.

Cyber Attacks 119

Cyber Attacks Social Engineering Scams Phishing 119

Fox IT

APRIL 29, 2022

Considering that BUMBLEBEE is actively being developed on, the operator(s) did not implement a command to update the loader’s binary, resulting the loss of existing infections. 135 89.44.9[.]235 Distribution via OneDrive links. Email thread hijacking with password protected ZIP. 45 103.175.16[.]46 46 104.168.236[.]99 9 45.11.19[.]224

Encryption 75

Encryption Passwords Malware Software 75

Fox IT

JANUARY 12, 2021

An example of the creation of such a scheduled task by the adversary: schtasks /create /ru "SYSTEM" /tn "update" /tr "cmd /c c:windowstempupdate.bat" /sc once /f /st 06:59:00. ps1 – Task automation Filename update.bat – Task automation Filename update*.bat 135 Q3 2017 VPN server login IPv4 address 43.250.200[.]106

VPN 68

VPN Accountability Passwords DNS 68

Security Boulevard

DECEMBER 2, 2023

If anyone has a link to the Luzhong Morning News version, please comment and I will update! On 17SEP2022, the team traveled to Jiangxi, Yunnan, Fujian, and other places, arresting two more key members and seven others, followed in quick succession by dozens more, eventually totaling 135 arrests.

Accountability 59

Accountability Cybercrime Mobile Surveillance 59