C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 22

2023-06-05 12:51 - Sicelo Ncekana

Cybersecurity News:
- Terminator’ tool uses vulnerable Windows driver to kill almost any security software [Adrian Potoroaca, TechSpot]
- Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack [Ravie Lakshmanan, The Hacker News]
- Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts [Ravie Lakshmanan, The Hacker News]
- New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal [Brittany Day, Linux Security]
- CISA orders govt agencies to patch MOVEit bug used for data theft [Sergiu Gatlan, Bleeping Computer]
Vulnerabilities & Patches:
- Barracuda Networks has disclosed that hackers have been actively exploiting a severe zero-day for 8 months [Cal Jeffrey, TeckSpot]
- Critical LibreOffice Code Execution Vuln Fixed [Brittany Day, Linux Security]
Breaches & Leaks:
- Enzo Biochem Hit by Ransomware, 2.5 Million Patients’ Data Compromised [Alessandro Mascellino, Info Security]
- MCNA Dental data breach impacts 8.9 million people after ransomware attack [Bill Toulas, Bleeping Computer]
- Toyota Discloses New Data Breach Involving Vehicle, Customer Information [Ionut Arghire, SecurityWeek]
Malware
- DogeRAT Malware Eyes Banking and Entertainment Sectors [Cyware Social, Cyware Social]
- New Horabot campaign takes over victim’s Gmail, Outlook accounts [Bill Toulas, Bleeping Computer]
- If you have a Gigabyte motherboard, your PC might stealthily download malware [Monica J. White, Digitaltrends]
- Is your new Android phone or TV box one of the millions impacted by preinstalled malware? [Kurt Knutsson, Fox News]
- Over 400 million Android phone affected from SpinOk spyware app [RAJESH REGMI, GizChina]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2