C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 20/21

2021-05-21 13:37 - Kgwadi Matenche

Malware:
- Microsoft warns of malware campaign spreading a RAT masquerading as ransomware [Catalin Cimpanu, The Record]
  - New Java STRRAT ships with .crimson ransomware module [Karsten Hahn, GDATA]
- Scammers Impersonating Windows Defender to Push Malicious Windows Apps [Craig Schmugar, McAfee]
Breaches & Leaks:
- Student health insurance carrier Guard.me suffers a data breach [Lawrence Abrams, Bleeping Computer]
- The Full Story of the Stunning RSA Hack Can Finally Be Told [Andy Greenberg, WIRED]
News:
- Android apps exposed data of millions of users through cloud authentication failures [Charlie Osborne, ZDNet]
- Irish High Court issues injunction to prevent HSE data leak [Lawrence Abrams, Bleeping Computer]
- Royal Mail phish deploys evasion tricks to avoid analysis [Malwarebytes Labs]
Vulnerabilities & Patches:
- Exploit released for wormable Windows HTTP vulnerability [Sergiu Gatlan, Bleeping Computer]
- Researchers Find Exploitable Bugs in Mercedes-Benz Cars [Ionut Arghire, SecurityWeek]
- 4 vulnerabilities under attack give hackers full control of Android devices [Dan Goodin, Ars Technica]
Others:
- Microsoft to retire Internet Explorer on some Windows 10 versions [Sergiu Gatlan, Bleeping Computer]
- Cybersecurity Training: Raising Awareness And Securing Your Business [Tripwire]
- Insurer AXA hit by ransomware after dropping support for ransom payments[Ax Sharma, Bleeping Computer]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2