C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for 2023 week 3

2023-01-20 13:51 - Sicelo Ncekana

Security news
- BackdoorDiplomacy APT Uses Turian Backdoor to Target Iranian Government [Cyware, Cyware]
- 37 million T-Mobile customers were hacked [David Goldman, CNN]
- Watch Out For This AnyDesk Phishing Campaign That Delivers Vidar Info Stealer [Abeerah Hashim, LHN]
- PayPal accounts breached in large-scale credential stuffing attack [Bill Toulas, BleepingComputer]
- A Sneaky Ad Scam Tore Through 11 Million Phones [Matt Burgess, Wired]
- LastPass users should move their crypto funds, experts warn [Pieter Arntz, Malwarebytes]
- Google sponsored ads lead to rogue imitation sites [Christopher Boyd, Malwarebytes]
Malware
- Ransomware attack hits nearly 300 fast food restaurants in UK, including KFC and Pizza Hut [Alexander Martin, The record]
- Phishers Use Blank Images to Disguise Malicious Attachments [Phil Muncaster, Info Security]
Vulnerabilities and Patches
- Researcher Finds Class Pollution – A Prototype Pollution Variant Affecting Python [Abeerah Hashim, LHN]
- Microsoft: Windows 11 apps might not start after system restore [Sergiu Gatlan, BleepingComputer]
- WAGO fixes config export flaw threatening data leak from industrial devices [Charlie Osborne, The Daily Swing]
- Drupal Patches Vulnerabilities Leading to Information Disclosure [Ionut Arghire, Scurity Week]
- Vendors Actively Bypass Security Patch for Year-Old Magento Vulnerability [Ionut Arghire, Scurity Week]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2