C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 14/20

- Roderick Mooi

  1. The Internet is drowning in COVID-19-related malware and phishing scams [Dan Goodin, Ars Technica / Condé Nast]
    - see also: Fighting Coronavirus-Themed Ransomware and Malware
    - Phishing Attack Says You’re Exposed to Coronavirus, Spreads Malware
    - Fake Corona Antivirus Software Used to Install Backdoor Malware
    - CovidLock Update: Deeper Analysis of Coronavirus Android Ransomware
    - coronavirus-covid-19-SARS-CoV-2-IoCs
  2. Hackers Hijack Routers’ DNS to Spread Malicious COVID-19 Apps [Lawrence Abrams, Bleeping Computer]
  3. Free Cyber Safety Resources during COVID-19 [Guest Authors, Tripwire]
    - see also: Stay Healthy, Stay Secure
  4. Hackers Take Advantage of Zoom’s Popularity to Push Malware [Sergiu Gatlan, Bleeping Computer]
    - see also: Zoom Cancels All Work On New Features After Latest Security Alerts
    - and: Zoom, the video conferencing app everyone is using, faces questions over privacy
    - Who’s Zooming Who? Guidelines on How to Use Zoom Safely
  5. FBI Warns of Teleconferencing and Online Classroom Hijacking During COVID-19 Pandemic [Kristen Setera, FBI Boston]
  6. Security and Microsoft Teams – Addressing Threats to Teams Meetings [Microsoft]
  7. Public health vs. personal privacy: Choose only one? [Tony Anscombe, WeLiveSecurity / ESET]
  8. Unauthorised Data Access Alert [University of Utah Health]
  9. Integrating Cybersecurity and Enterprise Risk Management (ERM) [draft] [NIST]
    - see also: Untangling Third-Party Risk
    - and: Quantifying Cyber Risk: Why You Must & Where to Start
  10. Three More Ransomware Families Create Sites to Leak Stolen Data [Lawrence Abrams, Bleeping Computer]
  11. Using Malicious Azure Apps to Infiltrate a Microsoft 365 Tenant [Eric Saraga, Varonis]
  12. This Is Not a Test: APT41 Initiates Global Intrusion Campaign Using Multiple Exploits [FireEye]